last executing test programs: 50m1.664179262s ago: executing program 0 (id=16): socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) write$binfmt_misc(r3, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@local, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@empty, 0x4d4, 0x6c}, @in=@rand_addr=0x64010100, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x80, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3507, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r5, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000000)=0x2e, 0xfffc) 49m53.989519199s ago: executing program 0 (id=22): r0 = socket(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000001900)={&(0x7f0000001940)=@hci, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001a00)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) prlimit64(0x0, 0xe, &(0x7f0000001b00)={0x8, 0x80000100008b}, 0x0) lstat(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001b40)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000001b80)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000001bc0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1058000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000001c00), 0x0, 0x0) read$msr(r5, &(0x7f0000001c40)=""/102392, 0x18ff8) sendmsg$tipc(r2, &(0x7f000001ac40)={0x0, 0xfffffdf6, &(0x7f000001ac80)=[{&(0x7f000001acc0)="a2", 0xfffffdef}], 0x1}, 0x20) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040040}, 0x44040) 49m49.248161375s ago: executing program 0 (id=28): socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) write$binfmt_misc(r3, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r4, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) sendfile(r4, r5, &(0x7f0000000000)=0x2e, 0xfffc) 49m47.960880926s ago: executing program 0 (id=31): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x162503, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r4 = fsmount(r0, 0x1, 0x0) fchdir(r4) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 49m44.815270068s ago: executing program 0 (id=34): socket(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001900)={&(0x7f0000001940)=@hci, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001a00)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) prlimit64(0x0, 0xe, &(0x7f0000001b00)={0x8, 0x80000100008b}, 0x0) lstat(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001b40)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000001b80)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001bc0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1058000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000001c00), 0x0, 0x0) read$msr(r4, &(0x7f0000001c40)=""/102392, 0x18ff8) sendmsg$tipc(r1, &(0x7f000001ac40)={0x0, 0xfffffdf6, &(0x7f000001ac80)=[{&(0x7f000001acc0)="a2", 0xfffffdef}], 0x1}, 0x20) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x161d) 49m36.621521788s ago: executing program 0 (id=40): socket(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001900)={&(0x7f0000001940)=@hci, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001a00)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) prlimit64(0x0, 0xe, &(0x7f0000001b00)={0x8, 0x80000100008b}, 0x0) lstat(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001b40)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000001b80)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001bc0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1058000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000001c00), 0x0, 0x0) read$msr(r4, &(0x7f0000001c40)=""/102392, 0x18ff8) sendmsg$tipc(r1, &(0x7f000001ac40)={0x0, 0xfffffdf6, &(0x7f000001ac80)=[{&(0x7f000001acc0)="a2", 0xfffffdef}], 0x1}, 0x20) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) 49m21.351428163s ago: executing program 32 (id=40): socket(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001900)={&(0x7f0000001940)=@hci, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001a00)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) prlimit64(0x0, 0xe, &(0x7f0000001b00)={0x8, 0x80000100008b}, 0x0) lstat(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001b40)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000001b80)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001bc0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1058000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000001c00), 0x0, 0x0) read$msr(r4, &(0x7f0000001c40)=""/102392, 0x18ff8) sendmsg$tipc(r1, &(0x7f000001ac40)={0x0, 0xfffffdf6, &(0x7f000001ac80)=[{&(0x7f000001acc0)="a2", 0xfffffdef}], 0x1}, 0x20) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) 49m4.284771071s ago: executing program 1 (id=67): socket(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001900)={&(0x7f0000001940)=@hci, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001a00)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) prlimit64(0x0, 0xe, &(0x7f0000001b00)={0x8, 0x80000100008b}, 0x0) lstat(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001b40)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000001b80)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1058000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000001c00), 0x0, 0x0) read$msr(r2, &(0x7f0000001c40)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) 49m1.516228835s ago: executing program 1 (id=72): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$DM_DEV_CREATE(r2, 0xc138fd03, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x68000, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}, @uuid={'CRP-syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r2, 0xc138fd09, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x170, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, [@linear={0x0, 0x2000, 0x0, 0x38, 'linear\x00', {@ram={'/dev/ram', 0x0}, 0x20, '0'}}]}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, 0x0) ioctl$DM_DEV_SUSPEND(r2, 0xc138fd06, &(0x7f0000000740)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x5800, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TARGET_MSG(r2, 0xc138fd0e, &(0x7f0000000880)={0x4, 0x0, 0x0, 0x170, 0x138, 0x0, 0x0, 0x8200, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '0\x00'}}, {0x0, @stats_create={'@stats_create ', '0+8', 0x20, '8', ' 1 precise_timestamps'}}}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x41, 0x0) mknodat$dm(0xffffffffffffff9c, &(0x7f0000000a40)='./dm0\x00', 0x6180, r3) r4 = openat$dm_dev(0xffffffffffffff9c, &(0x7f0000000a80)='./dm0\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000ac0)='\'7', 0x2, 0xff8) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x98) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 48m57.45811468s ago: executing program 1 (id=76): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x400000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r2, &(0x7f0000000440)=""/102400, 0x19000) socket(0xa, 0x3, 0x87) socket(0xa, 0x3, 0x87) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000019740)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000019800)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000019840)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000019880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x200, 0x1, 0xffffffff, 0x0, r5}}], 0x1, 0x0, 0x0) 48m52.266438312s ago: executing program 1 (id=82): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x162503, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r2, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r4 = fsmount(r0, 0x1, 0x0) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') faccessat(r5, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) 48m50.494276554s ago: executing program 1 (id=84): r0 = socket(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000001900)={&(0x7f0000001940)=@hci, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001a00)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) prlimit64(0x0, 0xe, &(0x7f0000001b00)={0x8, 0x80000100008b}, 0x0) lstat(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001b40)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000001b80)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000001bc0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1058000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000001c00), 0x0, 0x0) read$msr(r5, &(0x7f0000001c40)=""/102392, 0x18ff8) sendmsg$tipc(r2, &(0x7f000001ac40)={0x0, 0xfffffdf6, &(0x7f000001ac80)=[{&(0x7f000001acc0)="a2", 0xfffffdef}], 0x1}, 0x20) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040040}, 0x44040) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x161d) 48m44.204388818s ago: executing program 1 (id=88): socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@local, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@empty, 0x4d4, 0x6c}, @in=@rand_addr=0x64010100, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x80, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3507, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) sendfile(r5, r6, &(0x7f0000000000)=0x2e, 0xfffc) 48m27.885080561s ago: executing program 33 (id=88): socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x3) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@local, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@empty, 0x4d4, 0x6c}, @in=@rand_addr=0x64010100, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x80, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3507, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) sendfile(r5, r6, &(0x7f0000000000)=0x2e, 0xfffc) 45m19.418708529s ago: executing program 5 (id=224): r0 = socket(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000001900)={&(0x7f0000001940)=@hci, 0x80, &(0x7f00000019c0)=[{&(0x7f0000001a00)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) lstat(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001b40)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000001b80)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000001bc0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1058000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000001c00), 0x0, 0x0) read$msr(r5, &(0x7f0000001c40)=""/102392, 0x18ff8) sendmsg$tipc(r2, &(0x7f000001ac40)={0x0, 0xfffffdf6, &(0x7f000001ac80)=[{&(0x7f000001acc0)="a2", 0xfffffdef}], 0x1}, 0x20) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040040}, 0x44040) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x161d) 45m16.025923127s ago: executing program 5 (id=227): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000ec0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000f00)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000f40)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000f80)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') r3 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r3, &(0x7f0000001000)=""/102392, 0x18ff8) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, 0x0}) r5 = dup3(r4, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000006c0)=[@acquire]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 45m14.124803631s ago: executing program 5 (id=228): socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001b00)={0x8, 0x80000100008b}, 0x0) lstat(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001b40)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000001b80)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1058000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000001c00), 0x0, 0x0) read$msr(r2, &(0x7f0000001c40)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) 45m3.096472131s ago: executing program 5 (id=234): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x400000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r3, &(0x7f0000000440)=""/102400, 0x19000) socket(0xa, 0x3, 0x87) socket(0xa, 0x3, 0x87) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000019740)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000019800)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000019840)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, 0x0, 0x1, 0x0, 0x0) 45m0.904217786s ago: executing program 5 (id=236): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000ec0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000f00)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000f40)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000f80)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000480), 0x0, 0x0) read$msr(r3, &(0x7f0000001000)=""/102392, 0x18ff8) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000500)={0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000006c0)=[@acquire]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 44m55.752161354s ago: executing program 5 (id=238): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002f80)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000002fc0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000003000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000003040), 0x0, 0x0) read$msr(r3, &(0x7f0000003080)=""/102400, 0x19000) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x4000041) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, 0x0, 0x0) listen(r5, 0x5) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 44m39.420206157s ago: executing program 34 (id=238): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002f80)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000002fc0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000003000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000003040), 0x0, 0x0) read$msr(r3, &(0x7f0000003080)=""/102400, 0x19000) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1c, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x4000041) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, 0x0, 0x0) listen(r5, 0x5) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 38m54.473788468s ago: executing program 2 (id=582): openat$nullb(0xffffffffffffff9c, &(0x7f0000002540), 0x4000000004002, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$netlink(0x10, 0x3, 0xa) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() socket$inet6_sctp(0xa, 0x1, 0x84) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) bind$rds(r3, &(0x7f0000000300)={0x2, 0x4e21, @loopback}, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000440)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000480)={&(0x7f00000004c0)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'syzkaller0\x00'}) 38m43.423790389s ago: executing program 2 (id=597): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000700)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000840), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000008c0)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x0, 0x40, 0x0, 0x0) r4 = epoll_create1(0x80000) r5 = socket$vsock_stream(0x28, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)={0x60002005}) poll(&(0x7f0000000040)=[{r4, 0x4006}], 0x1, 0xfe89) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000980), 0x8101, 0x0) unshare(0x22020600) dup3(0xffffffffffffffff, r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={0x0}}, 0x0) 38m41.058207712s ago: executing program 2 (id=598): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000700)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) socket$igmp(0x2, 0x3, 0x2) connect$unix(r1, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000840), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000880), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000008c0)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) recvfrom(r3, 0x0, 0x0, 0x40, 0x0, 0x0) r4 = epoll_create1(0x80000) r5 = socket$vsock_stream(0x28, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)={0x60002005}) poll(&(0x7f0000000040)=[{r4, 0x4006}], 0x1, 0xfe89) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000980), 0x8101, 0x0) unshare(0x22020600) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={0x0}}, 0x0) 38m39.088649124s ago: executing program 2 (id=599): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x178) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x345) r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000fff000/0x1000)=nil, 0x6000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) r2 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000001c0)={0x1, 0x0, 0x7, &(0x7f0000000200)={0x0, "f4e1a230b44f44eaa65e405b747aa95df8c02c12eb4eaf00"}}) fallocate(r0, 0x20, 0x7fffffffffffffff, 0x3fff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x200a7a) sched_setscheduler(r3, 0x2, &(0x7f0000000300)=0x4) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000000380)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000019380)=0x410000002) syz_open_procfs(0x0, &(0x7f00000193c0)='net/tcp6\x00') bind$bt_hci(0xffffffffffffffff, 0x0, 0x19a8b62a0f9f6146) mount(0x0, 0x0, 0x0, 0x100054, 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000019440)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x6, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2'}, 0x5b) mount(&(0x7f00000194c0)=@filename='mtd0\x00', &(0x7f0000019500)='./file0\x00', &(0x7f0000019540)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f0000019580)='./file0\x00') creat(&(0x7f00000195c0)='./file0\x00', 0x40) mkdirat(r0, &(0x7f0000019600)='./proc\x00', 0x1ff) 38m38.217746293s ago: executing program 2 (id=601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f00000006c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000007c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000800), 0x0, 0x0) read$msr(r6, &(0x7f0000000840)=""/102392, 0x18ff8) mount(0x0, &(0x7f00000198c0)='./mnt\x00', &(0x7f0000019900)='nfs4\x00', 0x0, &(0x7f0000019940)='addr=127.0.0.1,port=2049,clientaddr=127.0.0.1,minorversion=1\x00') ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000019980)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000019a00)={0x0, 0x9, 0x1, [0x7ff, 0xe1, 0x1f9, 0x10000, 0x100000000], [0x8, 0x7, 0x8, 0x3, 0x3, 0x100, 0xbe2e, 0x7, 0x2, 0xfffffffffffffffe, 0x8, 0x7, 0x8, 0x4, 0x2ed1, 0x8, 0x58d7, 0x3, 0x5, 0x7, 0x4, 0xfffffffffffffff7, 0x7d, 0x31cdef52, 0x7, 0x40, 0x6, 0xfffffffffffff000, 0x3, 0xff, 0x1, 0x8, 0x0, 0x696, 0x7, 0x7bee, 0x7, 0x2, 0x3, 0x3, 0xfffffffffffffd0e, 0x9, 0x8, 0x3709, 0xf991, 0x9, 0x3, 0xffffffffffffff6d, 0x8, 0x1, 0x5, 0x3, 0x2, 0xffffffffffffffff, 0xff, 0x8ae1, 0x9, 0x7, 0x52ea, 0x4, 0x6, 0x1ff, 0x6, 0x401, 0x7, 0x400, 0x7, 0x2, 0x602af74b, 0x1, 0x7, 0x9, 0x6, 0xd, 0x8789, 0x7, 0x8, 0x0, 0x2, 0xfffffffffffff7b6, 0x3, 0x7ea, 0x800, 0xfffffffffffffff7, 0x5d1, 0x7fffffffffffffff, 0x6, 0x7, 0x100, 0x401, 0x2, 0x7, 0x3ff, 0x7, 0x80000001, 0x3, 0x3, 0x2, 0xd, 0x10, 0x6, 0x8, 0x8, 0x6, 0x2, 0x9, 0x1, 0x3, 0x7, 0x7fffffff, 0x56b, 0x7fff, 0x8000, 0x7, 0x5, 0x6, 0x3, 0x400, 0xffffffffffffff7f, 0x7f, 0x6]}) sendmsg$NFT_BATCH(r0, &(0x7f0000019f40)={0x0, 0x0, &(0x7f0000019f80)={&(0x7f0000019fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 38m36.358651704s ago: executing program 2 (id=603): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000380)={r0, 0x0, 0x9, 0x5, 0x8000000000008, 0x4}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @remote, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=[@dstopts_2292={{0x18, 0x29, 0x32}}], 0x18}, 0x400c8c0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/prev\x00') r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x180, 0x8000009, 0xffffffffffffff9c, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)=ANY=[], 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prlimit64(r3, 0x4, &(0x7f0000000080)={0x0, 0x9}, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560702000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x1e}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 38m20.394797369s ago: executing program 35 (id=603): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000380)={r0, 0x0, 0x9, 0x5, 0x8000000000008, 0x4}) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @remote, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=[@dstopts_2292={{0x18, 0x29, 0x32}}], 0x18}, 0x400c8c0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/prev\x00') r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x180, 0x8000009, 0xffffffffffffff9c, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)=ANY=[], 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) prlimit64(r3, 0x4, &(0x7f0000000080)={0x0, 0x9}, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560702000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c0000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x25, '\x00', 0x0, @fallback=0x1e}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 32m59.76086477s ago: executing program 7 (id=1343): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 32m53.164054229s ago: executing program 7 (id=1360): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r5, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f00000002c0)='M', 0x1) recvmsg$unix(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) socket$inet(0x2, 0x2, 0x1) 32m50.579060685s ago: executing program 7 (id=1364): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) timer_create(0x2, 0x0, &(0x7f00000016c0)) timer_settime(0x0, 0x1, &(0x7f0000001700)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000001740)=0x0) timer_settime(r0, 0x1, &(0x7f0000001780)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(r0) 32m49.439986982s ago: executing program 7 (id=1366): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000980)="$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") fanotify_mark(0xffffffffffffffff, 0x2, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./file1\x00', 0x183042, 0x15) creat(&(0x7f00000001c0)='./bus\x00', 0x20) syz_mount_image$vfat(&(0x7f0000000800), &(0x7f0000000840)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2208c54, &(0x7f0000000e00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="06f137d1881ef185c472b9a9a1088b3c1dcad523b1da404b050822fdf2a8b8f200eae500b099b29abe1f8caf9c23bbc48fc387ffb40992655898", @ANYRESOCT], 0x3f, 0x2bd, &(0x7f0000000fc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./file1\x00', 0x103a42, 0x32) ftruncate(r1, 0x6000000) mount(&(0x7f0000000200)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./bus\x00', 0x0, 0x1000, 0x0) r2 = creat(&(0x7f00000015c0)='./bus\x00', 0x119) r3 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x101501, 0x0) ioctl$DM_LIST_DEVICES(r3, 0xc138fd02, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x1c8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {}, "b7fa6296ef7ef64c9f6a846f18c50b9d8879efe015d41ba01b78eb46156ee4b9a91fdc6f056cac16e240789df5b6720db59d34c56707316f0c3ee678137ab20705a3eab159cb82437e262ab24eabe6b536b4ce99896659ee611cbe4c8309569229d5950ee8c7854d1ec5df17f1df1ec552606c24d4b0d0f51b976ba727e7ba7ace08d0175353dbdc8f283d2b"}) ioctl$DM_DEV_CREATE(r3, 0xc138fd03, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}, @uuid={'CRP-syz', 0x0, '2\x00'}}}) ioctl$DM_TARGET_MSG(r3, 0xc138fd0e, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x170, 0x138, 0x0, 0x0, 0xa1001, 0x0, 0x0, @by_dev={r4}, {0x2000, @stats_create={'@stats_create ', '8+16', 0x20, '8', ' 1 precise_timestamps'}}}) write$cgroup_int(r2, &(0x7f0000001600), 0xfffffdd8) pwrite64(r0, 0x0, 0x0, 0xe7c) 32m47.107993402s ago: executing program 7 (id=1370): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2810c0a, &(0x7f0000001580)=ANY=[@ANYBLOB='errors=remount-ro,noquota,nodiscard,iocharset=macturkish,errors=continue,errors=continue,nointegrity\x00iocharset=macgreek,quota,usrquota,usrquota,errors=remount-rocard,noquota,noquota,\x00\x00\x00\x00\x00'], 0x1, 0x61ba, &(0x7f0000001640)="$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") r0 = open(&(0x7f0000000840)='.\x00', 0x20000, 0x0) syz_mount_image$hfsplus(&(0x7f0000000200), &(0x7f0000000240)='./sys\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x3, 0x626, &(0x7f0000000980)="$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") getdents64(r0, &(0x7f0000000880)=""/224, 0xe0) 32m43.978476483s ago: executing program 7 (id=1376): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r5, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f00000002c0)='M', 0x1) recvmsg$unix(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) socket$inet(0x2, 0x2, 0x1) 32m43.43356907s ago: executing program 36 (id=1376): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r5, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) setsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f00000002c0)='M', 0x1) recvmsg$unix(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) socket$inet(0x2, 0x2, 0x1) 32m30.606975898s ago: executing program 4 (id=1411): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mkdir(&(0x7f0000008040)='./bus\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x7fffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) io_uring_setup(0x5e28, &(0x7f0000000200)={0x0, 0x350e, 0x1000, 0x0, 0x1d4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000008080)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f00000080c0)='./file0\x00', &(0x7f0000008100), 0x8, &(0x7f0000008140)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000008180)='./file0\x00', 0x0, 0x0) fchmodat(r4, &(0x7f00000081c0)='./file1\x00', 0x0) unlink(&(0x7f0000008200)='./file1\x00') mount$fuse(0x0, &(0x7f0000008240)='./file0\x00', 0x0, 0x20, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000008280)='./file1\x00', 0x0) 32m28.230103133s ago: executing program 4 (id=1421): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002380)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x1b8, 0x12, 0x600, 0x0, 0x202, 0x388, 0x2e8, 0x2e8, 0x388, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0xd00, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000000000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1776b4318bae1944}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:fuse_device_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 32m27.911731556s ago: executing program 4 (id=1416): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 32m26.273324544s ago: executing program 4 (id=1422): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000980)="$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") fanotify_mark(0xffffffffffffffff, 0x2, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001580)='./file1\x00', 0x183042, 0x15) creat(&(0x7f00000001c0)='./bus\x00', 0x20) syz_mount_image$vfat(&(0x7f0000000800), &(0x7f0000000840)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2208c54, &(0x7f0000000e00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="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", @ANYRESHEX, @ANYBLOB="06f137d1881ef185c472b9a9a1088b3c1dcad523b1da404b050822fdf2a8b8f200eae500b099b29abe1f8caf9c23bbc48fc387ffb40992655898", @ANYRESOCT], 0x3f, 0x2bd, &(0x7f0000000fc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./file1\x00', 0x103a42, 0x32) ftruncate(r1, 0x6000000) mount(&(0x7f0000000200)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./bus\x00', 0x0, 0x1000, 0x0) r2 = creat(&(0x7f00000015c0)='./bus\x00', 0x119) r3 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x101501, 0x0) ioctl$DM_LIST_DEVICES(r3, 0xc138fd02, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x1c8, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {}, "b7fa6296ef7ef64c9f6a846f18c50b9d8879efe015d41ba01b78eb46156ee4b9a91fdc6f056cac16e240789df5b6720db59d34c56707316f0c3ee678137ab20705a3eab159cb82437e262ab24eabe6b536b4ce99896659ee611cbe4c8309569229d5950ee8c7854d1ec5df17f1df1ec552606c24d4b0d0f51b976ba727e7ba7ace08d0175353dbdc8f283d2b"}) ioctl$DM_DEV_CREATE(r3, 0xc138fd03, &(0x7f0000000480)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x20000, 0x0, 0x0, {0x0, {'syz', 0x0, '2\x00'}, @uuid={'CRP-syz', 0x0, '2\x00'}}}) ioctl$DM_TARGET_MSG(r3, 0xc138fd0e, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x170, 0x138, 0x0, 0x0, 0xa1001, 0x0, 0x0, @by_dev={r4}, {0x2000, @stats_create={'@stats_create ', '8+16', 0x20, '8', ' 1 precise_timestamps'}}}) write$cgroup_int(r2, &(0x7f0000001600), 0xfffffdd8) pwrite64(r0, 0x0, 0x0, 0xe7c) 32m25.390349105s ago: executing program 4 (id=1424): r0 = mq_open(&(0x7f0000000680)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) mq_unlink(&(0x7f0000000a40)='eth0\x00\xccy\xdc\v\xa0\xa9f\xcc\xff>\x81\xad\xd8H\x9a \x16w\x8e,\x1d=\x0f`4\']\xf7\x93N\x8c8g3\x85\x97\x8e\x87\'\xd9M\xb0\xdbF\x8c\x92\x94\xaf7j\bv~\x92Y\x11\xde\x010xffffffffffffffff}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socket$nl_generic(0x10, 0x3, 0x10) msgctl$MSG_INFO(0x0, 0xc, 0x0) syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x5) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000000700)=""/102392, 0x18ff8) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xaf123e30d406ff1, 0x2010, 0xffffffffffffffff, 0xe414c000) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000019700)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000019740)={'syz_tun\x00', &(0x7f0000019780)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0x100, 0x5, 0xfffffff8, 0x0, 0x2]}}) r4 = syz_open_dev$video4linux(&(0x7f00000197c0), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000019800)={0x1, 0x0, {0x280, 0x1e0, 0x3014, 0x1, 0x8, 0x3, 0x2, 0x5}}) 15.310245887s ago: executing program 3 (id=4868): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000880)=""/102368, 0x18fe0) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000400)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000440), 0x3b, 0x0) 14.405713603s ago: executing program 3 (id=4869): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="fc000000190001002bbd700000000000ff010000000000000000000000000001fe80000000040000000000000000000f00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a0000000000007299000000"], 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x44, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}]}, &(0x7f0000000140)=0x10) 14.317597672s ago: executing program 3 (id=4870): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f00000040c0)=""/102400, 0x19000) rseq(&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 13.00471083s ago: executing program 6 (id=4871): socket$nl_route(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x38) r0 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x8) r1 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@grpquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@discard}, {@dioread_nolock}, {@nodiscard}]}, 0x3, 0x49e, &(0x7f0000001040)="$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") ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000500)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000640), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000006c0)) setpgid(r2, r2) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000700)=@usbdevfs_driver={0xffffffff, 0x9, 0x0}) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000800)=0x1) 12.268191558s ago: executing program 3 (id=4872): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setns(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001800)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000001840)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001880)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000001900)=""/102392, 0x18ff8) r3 = io_uring_setup(0x1684, &(0x7f00000004c0)={0x0, 0x3a2b, 0x8, 0x2, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)=""/4095, 0x440000}], 0x100000000000011a) 11.077757393s ago: executing program 3 (id=4873): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000a00)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000a40)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000a80)=0x59) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000ac0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000b00), 0x0, 0x0) read$msr(r2, &(0x7f000001c480)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x3, 0x16, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001f80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001fc0), 0xffffffffffffffd2, 0x10, 0x0, 0x38}, 0x48) 9.270642304s ago: executing program 6 (id=4874): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f00000018c0)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f000001a8c0), 0x189642, 0x0) 7.236298968s ago: executing program 6 (id=4875): syz_open_dev$sndmidi(0x0, 0x2, 0x141102) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x2, 0x7, 0x2) r1 = socket(0x10, 0x2, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000100)={0x1f, @none}, 0x8) listen(r2, 0x3ff) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00000000000000", 0x17) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x80400, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000280)=0x8000000) socket$nl_route(0x10, 0x3, 0x0) 5.916634027s ago: executing program 3 (id=4876): socket$nl_route(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x38) r0 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x8) r1 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@grpquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@discard}, {@dioread_nolock}, {@nodiscard}]}, 0x3, 0x49e, &(0x7f0000001040)="$eJzs3M9vFFUcAPDvTLcFKVBEROWHVtHY+KO1BZWDBzV608RED3gxqW0hyEINLYkQosUYPBoS78STMfoXeNKLUU8mXvVuSIgSE9CDrpndmdItu0tLt93ifj7Jtu/Nvu173755M2/m7W4AXWsw+5FEbI6IXyJioJatLzBY+3XtytmJv66cnUiiUnn996Ra7uqVsxNF0eJ1/XlmKI1IP0rySurNnD5zbLxcnjqZ50dmj787MnP6zJNHj48fmToydWLs4MED+0effWbs6bbEmcV1ddf703uS0psXXp04dOHtH74qRcTOvbXnF8axImn/fHIwC/yPStXiYo+0pbL1Y8uCdFLqYENYlp6IyLqrtzr+B6InrnfeQLz8YUcbB6yq7Ny0ofnTcxXgfyyJTrcA6IziRJ9d/xaPpc8e5lY6/ei4yy/ULoCyuK/lj9ozpUjzMr2rWP+9EXFo7u+L2SPyfvhnc4OC9/WvYisAgG7yTTb/eaLR/C+NnQvKbc3XULZFxJ0RsT0i7oqIHRFxd0S17D35fGY5aktDPfP5G+ef6aVbDm4Jsvnfc/naVv38rzb7q1Qq//bkuS3V+HuTw0fLU0/l/5Oh6N2Q5Udb1PHtSz9/smjTWDHxHrw+/xvIfmf1F3PBvB2XSotu0E2Oz463a1J6+VzErlKj+JP5lYAkm35GxK7l/emtReLoY1/saVZoQfwXG8ffQhvWmSqfRTxa6/+5qI//XFEmab0+ObIxyn0xUuwVN/rxp/OvNat/RfG3Qdb/m+r3/0UlBv5MFq7Xziy/jvO/ftz0mvLm8Tfe//uSN6pr1n35tvfGZ2dPjkb0Ja9U83Xbx66/tsgX5bP4h/Y1Hv/b89dk8e+OiGwn3hsR9+dLnFnbH4yIhyJiX4v4v3/x4XduPf7VlcU/2fD4N/8ugG31/b/8RM+x775uVv/S+v9ANTWUb6ke/26ieXOiPJUd1m95bwYAAIDbTxoRmyNJh+fTaTo8XHsP/47YlJanZ2YfPzx96sRk7TMC26I3Le50DeT3Q7Or7dGkeC9A7f7oWH6vuLhfuj+/b/xpzx3V/PDEdHmyw7FDt+tvMv4zv/V0unXAqvN5Lehei8d/2qF2AGvP+R+6V9PxX3p+bRsCrDnnf+heC8b/l6fO764mPqj+fGD+iYZrAS2+OQS4PTj/Q/cy/qF7Gf/QvYx/6Eor+Vz/+k70rY9mLCWxMe+M2pbPezvdniUlIm1V5q1Y84bFuvi3tDuRtPwyi1VMdPjABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Cb/BQAA///a3O7u") ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000500)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000600), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000640), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000680), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f00000006c0)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000700)=@usbdevfs_driver={0xffffffff, 0x9, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000ec0)='./mnt\x00', 0x1ff) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000800)=0x1) 4.095947448s ago: executing program 9 (id=3910): r0 = openat(0xffffffffffffff9c, &(0x7f0000003280)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) write$proc_mixer(r0, &(0x7f0000003480)=ANY=[], 0x1001) 165.12µs ago: executing program 6 (id=4877): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000880)=""/102368, 0x18fe0) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000400)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000440), 0x3b, 0x0) 0s ago: executing program 8 (id=3776): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141102) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys_sec\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r1, &(0x7f0000000280)=""/9, 0xfffffd87) kernel console output (not intermixed with test programs): found [ 2763.686354][T27038] bridge0: port 1(bridge_slave_0) entered blocking state [ 2763.706037][T27038] bridge0: port 1(bridge_slave_0) entered disabled state [ 2763.721496][T27038] bridge_slave_0: entered allmulticast mode [ 2763.729068][T27038] bridge_slave_0: entered promiscuous mode [ 2763.876872][T27038] bridge0: port 2(bridge_slave_1) entered blocking state [ 2763.891612][T27038] bridge0: port 2(bridge_slave_1) entered disabled state [ 2763.898924][T27038] bridge_slave_1: entered allmulticast mode [ 2763.922189][T27038] bridge_slave_1: entered promiscuous mode [ 2764.144738][T27038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2764.177721][T27038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2764.612661][T27038] team0: Port device team_slave_0 added [ 2764.656304][T27038] team0: Port device team_slave_1 added [ 2766.730911][T27003] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2766.764156][T27003] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2766.835818][T27038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2766.850812][T27038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2766.903318][T27038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2767.001798][T27003] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2767.089873][T27038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2767.123348][T27160] loop3: detected capacity change from 0 to 256 [ 2767.156587][T27038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2767.183548][T27038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2767.540575][T27003] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2769.922654][T27038] hsr_slave_0: entered promiscuous mode [ 2769.965926][T27038] hsr_slave_1: entered promiscuous mode [ 2769.990010][T27038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2770.000461][T27038] Cannot create hsr debugfs directory [ 2770.070669][T21840] hsr_slave_0: left promiscuous mode [ 2770.088349][T21840] hsr_slave_1: left promiscuous mode [ 2770.112560][T21840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2770.120086][T21840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2770.154977][T21840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2770.165457][T21840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2770.191552][T21840] bridge_slave_1: left allmulticast mode [ 2770.197295][T21840] bridge_slave_1: left promiscuous mode [ 2770.230520][T21840] bridge0: port 2(bridge_slave_1) entered disabled state [ 2770.246859][T21840] bridge_slave_0: left allmulticast mode [ 2770.265948][T21840] bridge_slave_0: left promiscuous mode [ 2770.276339][T21840] bridge0: port 1(bridge_slave_0) entered disabled state [ 2770.349489][T21840] veth1_macvtap: left promiscuous mode [ 2770.355273][T21840] veth0_macvtap: left promiscuous mode [ 2770.366673][T21840] veth1_vlan: left promiscuous mode [ 2771.990789][T21840] veth0_vlan: left promiscuous mode [ 2773.108989][T27195] Bluetooth: MGMT ver 1.22 [ 2774.922429][T27198] FAULT_INJECTION: forcing a failure. [ 2774.922429][T27198] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2774.980437][T27198] CPU: 0 PID: 27198 Comm: syz.6.4559 Not tainted syzkaller #0 [ 2774.988122][T27198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 2774.998236][T27198] Call Trace: [ 2775.001572][T27198] [ 2775.004569][T27198] dump_stack_lvl+0x18c/0x250 [ 2775.009313][T27198] ? verify_lock_unused+0x140/0x140 [ 2775.014581][T27198] ? show_regs_print_info+0x20/0x20 [ 2775.020015][T27198] ? load_image+0x420/0x420 [ 2775.024587][T27198] ? verify_lock_unused+0x140/0x140 [ 2775.029895][T27198] should_fail_ex+0x394/0x4c0 [ 2775.034637][T27198] get_futex_key+0x134/0xf40 [ 2775.039291][T27198] ? futex_setup_timer+0xc0/0xc0 [ 2775.044297][T27198] futex_wake+0x127/0x4f0 [ 2775.048766][T27198] ? __lock_acquire+0x7eb0/0x7eb0 [ 2775.053957][T27198] ? futex_wake_mark+0x150/0x150 [ 2775.058953][T27198] ? shmctl_do_lock+0x23/0x8b0 [ 2775.063821][T27198] ? shmctl_do_lock+0x23/0x8b0 [ 2775.068672][T27198] do_futex+0x35d/0x3e0 [ 2775.072880][T27198] ? __x64_sys_shmctl+0x80/0x80 [ 2775.077802][T27198] ? __ia32_sys_get_robust_list+0x110/0x110 [ 2775.083765][T27198] __se_sys_futex+0x3a9/0x440 [ 2775.088506][T27198] ? __x64_sys_futex+0xf0/0xf0 [ 2775.093331][T27198] ? __x64_sys_futex+0x21/0xf0 [ 2775.098167][T27198] do_syscall_64+0x55/0xb0 [ 2775.102658][T27198] ? clear_bhb_loop+0x40/0x90 [ 2775.107409][T27198] ? clear_bhb_loop+0x40/0x90 [ 2775.112148][T27198] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2775.118123][T27198] RIP: 0033:0x7fd598ba8f19 [ 2775.122597][T27198] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2775.142351][T27198] RSP: 002b:00007fd599b130e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2775.150857][T27198] RAX: ffffffffffffffda RBX: 00007fd598e25fa8 RCX: 00007fd598ba8f19 [ 2775.159235][T27198] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd598e25fac [ 2775.167249][T27198] RBP: 00007fd598e25fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 2775.175263][T27198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2775.183356][T27198] R13: 00007fd598e26038 R14: 00007ffe21878bc0 R15: 00007ffe21878ca8 [ 2775.191379][T27198] [ 2775.196561][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2775.203365][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2778.161428][T21840] team0 (unregistering): Port device team_slave_1 removed [ 2779.181569][T22981] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 2779.297456][T21840] team0 (unregistering): Port device team_slave_0 removed [ 2779.404967][T21840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2779.414091][T22981] usb 7-1: Using ep0 maxpacket: 8 [ 2779.423252][T22981] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2779.459014][T22981] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2779.472794][T22981] usb 7-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 2779.499848][T22981] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2779.540381][T22981] kobil_sct 7-1:1.0: required endpoints missing [ 2779.602747][T21840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2781.053547][T22981] usb 7-1: USB disconnect, device number 76 [ 2782.903898][T21840] bond0 (unregistering): Released all slaves [ 2783.048753][T27229] loop3: detected capacity change from 0 to 256 [ 2783.675091][T27233] 0x000000000000-0x000000020000 : "" [ 2783.689836][T27233] ftl_cs: FTL header not found. [ 2783.746437][T27234] loop3: detected capacity change from 0 to 164 [ 2783.843843][T27210] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 2784.385517][T27240] device-mapper: table: 248:15: thin-pool: Error creating metadata object (-EPERM) [ 2784.395323][T27240] device-mapper: ioctl: error adding target to table [ 2785.405495][T27003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2785.454603][T27003] 8021q: adding VLAN 0 to HW filter on device team0 [ 2785.512145][ T750] bridge0: port 1(bridge_slave_0) entered blocking state [ 2785.519402][ T750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2785.562220][ T750] bridge0: port 2(bridge_slave_1) entered blocking state [ 2785.569483][ T750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2787.140126][T27003] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2787.200324][T27003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2787.565091][T27038] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2787.598305][T27038] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2787.638482][T27038] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2787.691876][T27038] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2787.991294][T27003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2788.220545][T27038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2788.316038][T27038] 8021q: adding VLAN 0 to HW filter on device team0 [ 2788.367045][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 2788.374451][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2788.463980][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 2788.471339][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2791.584000][T27003] veth0_vlan: entered promiscuous mode [ 2791.697926][T27003] veth1_vlan: entered promiscuous mode [ 2791.779051][T27300] loop6: detected capacity change from 0 to 256 [ 2792.052125][T27003] veth0_macvtap: entered promiscuous mode [ 2792.155335][T27003] veth1_macvtap: entered promiscuous mode [ 2792.331882][T27003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2792.350614][T27003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2792.360778][T27003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2792.371367][T27003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2792.392619][T27003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2792.481722][T27038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2792.504155][T27003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2792.520358][T27003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2792.560513][T27003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2792.580246][T27003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2792.619509][T27003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2792.661596][T27003] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2792.681409][T27003] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2792.700878][T27003] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2792.709683][T27003] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2793.052941][T27314] Bluetooth: MGMT ver 1.22 [ 2794.089486][ T42] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2794.219443][T27038] veth0_vlan: entered promiscuous mode [ 2794.392944][ T42] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2794.474405][T27038] veth1_vlan: entered promiscuous mode [ 2794.647574][ T42] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2795.674493][T27038] veth0_macvtap: entered promiscuous mode [ 2795.893789][ T42] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2796.041594][T27038] veth1_macvtap: entered promiscuous mode [ 2796.119043][T27351] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4581'. [ 2796.293413][T27038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2796.368592][T27038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2796.407655][T27038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2796.460480][T27038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2796.500634][T27038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2796.550354][T27038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2796.592156][T27038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2796.654508][T27038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2796.711980][T27038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2796.790295][T27038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2796.840395][T27038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2796.900636][T27038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2796.971596][T27038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2797.003301][T27038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2797.091316][T27038] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2797.232213][T18676] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2797.248185][T18676] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2797.260357][T18676] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2797.268439][T18676] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2797.280524][T18676] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2797.281909][T27038] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2797.310493][T18676] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2797.536097][T27038] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2797.570360][T27038] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2799.075834][T27369] rxe_eth0 speed is unknown, defaulting to 1000 [ 2799.381046][T21578] Bluetooth: hci0: command tx timeout [ 2799.916882][T27391] loop3: detected capacity change from 0 to 2048 [ 2800.230499][T27395] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 2800.350113][ T27] audit: type=1800 audit(1794424226.167:346): pid=27391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4584" name="dev" dev="loop3" ino=19 res=0 errno=0 [ 2800.734599][T27395] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 2800.758685][T27395] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 2800.789951][T27395] Remounting filesystem read-only [ 2800.836006][ T990] NILFS (loop3): discard dirty page: offset=65536, ino=3 [ 2800.888158][ T990] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2800.930760][ T990] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2800.939861][ T990] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2800.980287][ T990] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2800.989415][ T990] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 2801.083129][ T990] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2801.118104][ T990] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2801.150531][ T990] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 2801.170408][ T990] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2801.179370][ T990] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 2801.310319][ T990] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 2801.370500][ T990] NILFS (loop3): discard dirty page: offset=0, ino=18 [ 2801.377537][ T990] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 2801.430462][ T990] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2801.439413][ T990] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2801.470653][T18676] Bluetooth: hci0: command tx timeout [ 2801.510383][ T990] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2801.519469][ T990] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 2801.527128][ T990] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 2801.535351][ T990] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2801.544967][ T990] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2801.554326][ T990] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2801.563641][ T990] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 2801.570972][ T990] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 2801.578353][ T990] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2801.588365][ T990] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2801.597628][ T990] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2801.620326][ T990] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 2801.627094][ T990] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 2801.640096][ T990] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2801.649442][ T990] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2801.690651][ T990] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 2801.718770][T15862] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 2801.750541][T15862] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 2802.301827][T27369] chnl_net:caif_netlink_parms(): no params data found [ 2802.413627][T27418] loop6: detected capacity change from 0 to 256 [ 2803.119640][T27369] bridge0: port 1(bridge_slave_0) entered blocking state [ 2803.149899][T27369] bridge0: port 1(bridge_slave_0) entered disabled state [ 2803.180450][T27369] bridge_slave_0: entered allmulticast mode [ 2803.188249][T27369] bridge_slave_0: entered promiscuous mode [ 2803.317017][T27369] bridge0: port 2(bridge_slave_1) entered blocking state [ 2803.345199][T27369] bridge0: port 2(bridge_slave_1) entered disabled state [ 2803.371002][T27369] bridge_slave_1: entered allmulticast mode [ 2803.381568][T27369] bridge_slave_1: entered promiscuous mode [ 2803.530581][T18676] Bluetooth: hci0: command tx timeout [ 2803.771582][T27369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2804.174879][T27369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2804.410856][T14973] usb 7-1: new full-speed USB device number 77 using dummy_hcd [ 2804.825291][T14973] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 2804.857218][T14973] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 2804.909998][T14973] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2804.961592][T27369] team0: Port device team_slave_0 added [ 2804.966079][T14973] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2804.988116][T14973] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2805.018561][T14973] usb 7-1: Product: syz [ 2805.020474][ T42] hsr_slave_0: left promiscuous mode [ 2805.038824][T14973] usb 7-1: Manufacturer: syz [ 2805.043747][ T42] hsr_slave_1: left promiscuous mode [ 2805.049900][T14973] usb 7-1: SerialNumber: syz [ 2805.089798][T14973] usb 7-1: config 0 descriptor?? [ 2805.089994][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2805.116204][T27440] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2805.149475][T14973] usb 7-1: selecting invalid altsetting 0 [ 2805.175602][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2805.203881][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2805.228571][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2805.297964][ T42] bridge_slave_1: left allmulticast mode [ 2805.329636][ T42] bridge_slave_1: left promiscuous mode [ 2805.354246][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 2805.377992][ T42] bridge_slave_0: left allmulticast mode [ 2805.410304][ T42] bridge_slave_0: left promiscuous mode [ 2805.435157][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 2805.610364][T18676] Bluetooth: hci0: command tx timeout [ 2805.669207][T14973] usb 7-1: USB disconnect, device number 77 [ 2805.844101][T21578] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2805.864189][T21578] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2805.874983][T21578] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2805.895793][ T42] veth1_macvtap: left promiscuous mode [ 2805.903958][ T42] veth0_macvtap: left promiscuous mode [ 2805.909973][ T42] veth1_vlan: left promiscuous mode [ 2805.930150][ T42] veth0_vlan: left promiscuous mode [ 2805.982766][T21578] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2805.993652][T21578] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2806.020650][T21578] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2806.281053][T27464] netlink: 'syz.6.4591': attribute type 72 has an invalid length. [ 2806.397531][T27468] UDC core: g1: couldn't find an available UDC or it's busy [ 2808.170630][T18676] Bluetooth: hci1: command tx timeout [ 2808.377255][ T42] team0 (unregistering): Port device team_slave_1 removed [ 2808.465901][ T42] team0 (unregistering): Port device team_slave_0 removed [ 2808.545393][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2808.633362][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2809.310105][ T42] bond0 (unregistering): Released all slaves [ 2809.455340][T27369] team0: Port device team_slave_1 added [ 2809.592075][T27369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2809.599741][T27369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2809.639460][T27369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2809.661783][T27369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2809.668803][T27369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2809.723930][T27369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2809.745943][T27461] rxe_eth0 speed is unknown, defaulting to 1000 [ 2811.410315][T18676] Bluetooth: hci1: command tx timeout [ 2811.709060][T27369] hsr_slave_0: entered promiscuous mode [ 2811.781125][T27369] hsr_slave_1: entered promiscuous mode [ 2812.405233][ T42] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2812.663611][ T42] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2812.995555][ T42] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2813.205293][ T42] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2813.450647][T18676] Bluetooth: hci1: command tx timeout [ 2815.478376][T27524] loop6: detected capacity change from 0 to 256 [ 2815.572436][T18676] Bluetooth: hci1: command tx timeout [ 2815.814536][T27521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4595'. [ 2816.000508][T27461] chnl_net:caif_netlink_parms(): no params data found [ 2818.052027][T27551] netlink: 'syz.6.4600': attribute type 72 has an invalid length. [ 2818.117826][T27369] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2818.131044][T27549] UDC core: g1: couldn't find an available UDC or it's busy [ 2818.146133][T27369] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2818.183758][T27461] bridge0: port 1(bridge_slave_0) entered blocking state [ 2818.206747][T27461] bridge0: port 1(bridge_slave_0) entered disabled state [ 2818.235344][T27461] bridge_slave_0: entered allmulticast mode [ 2818.244229][T27461] bridge_slave_0: entered promiscuous mode [ 2818.253267][T27461] bridge0: port 2(bridge_slave_1) entered blocking state [ 2818.261482][T27461] bridge0: port 2(bridge_slave_1) entered disabled state [ 2818.268770][T27461] bridge_slave_1: entered allmulticast mode [ 2818.276573][T27461] bridge_slave_1: entered promiscuous mode [ 2818.326852][T27369] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2818.385735][T27369] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2818.481451][T27461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2818.516973][T27461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2818.804872][T27461] team0: Port device team_slave_0 added [ 2818.945933][T27461] team0: Port device team_slave_1 added [ 2819.171948][T27461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2819.178987][T27461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2820.885216][T27461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2821.007162][T27461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2821.030406][T27461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2821.139369][T27461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2822.538888][T27461] hsr_slave_0: entered promiscuous mode [ 2822.608690][T27461] hsr_slave_1: entered promiscuous mode [ 2822.669199][T27461] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2822.720451][T27461] Cannot create hsr debugfs directory [ 2823.473660][T27369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2823.611044][ T42] hsr_slave_0: left promiscuous mode [ 2823.625083][ T42] hsr_slave_1: left promiscuous mode [ 2823.694459][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2823.722002][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2823.783500][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2823.842344][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2823.916960][ T42] bridge_slave_1: left allmulticast mode [ 2823.982206][ T42] bridge_slave_1: left promiscuous mode [ 2824.041747][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 2824.195618][ T42] bridge_slave_0: left allmulticast mode [ 2824.256191][ T42] bridge_slave_0: left promiscuous mode [ 2824.336199][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 2824.598280][ T42] veth1_macvtap: left promiscuous mode [ 2824.629133][ T42] veth0_macvtap: left promiscuous mode [ 2824.636966][ T42] veth1_vlan: left promiscuous mode [ 2824.675931][ T42] veth0_vlan: left promiscuous mode [ 2826.256809][ T42] team0 (unregistering): Port device team_slave_1 removed [ 2826.338153][ T42] team0 (unregistering): Port device team_slave_0 removed [ 2826.420139][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2826.500045][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2827.199131][ T42] bond0 (unregistering): Released all slaves [ 2827.319588][T27615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4606'. [ 2827.394110][T27369] 8021q: adding VLAN 0 to HW filter on device team0 [ 2827.917777][T21840] bridge0: port 1(bridge_slave_0) entered blocking state [ 2827.925310][T21840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2828.118197][T27626] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2828.316947][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 2828.324237][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2829.423250][T27646] UDC core: g1: couldn't find an available UDC or it's busy [ 2829.541291][T27369] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2831.946191][T27461] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2831.975774][T27461] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2832.015262][T27461] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2832.046062][T27369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2832.071694][T27461] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2832.398496][T27681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4616'. [ 2832.574850][T27461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2833.236005][T27461] 8021q: adding VLAN 0 to HW filter on device team0 [ 2833.276490][T22138] bridge0: port 1(bridge_slave_0) entered blocking state [ 2833.283733][T22138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2833.346992][T22138] bridge0: port 2(bridge_slave_1) entered blocking state [ 2833.354269][T22138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2833.504115][T27461] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2833.884773][T27369] veth0_vlan: entered promiscuous mode [ 2833.933481][T27369] veth1_vlan: entered promiscuous mode [ 2834.802629][T27369] veth0_macvtap: entered promiscuous mode [ 2834.872129][T27369] veth1_macvtap: entered promiscuous mode [ 2834.911323][T27369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2834.922882][T27369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2834.932890][T27369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2834.944697][T27369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2834.957710][T27369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2834.970682][T27369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2834.981519][T27369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2834.998364][T27369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2835.009517][T27369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2835.027481][T27369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2835.048348][T27461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2835.079617][T27369] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2835.094808][T27369] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2835.108236][T27369] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2835.124324][T27369] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2836.271855][T27686] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2836.502093][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.508556][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2837.257225][T27731] UDC core: g1: couldn't find an available UDC or it's busy [ 2837.295354][T27461] veth0_vlan: entered promiscuous mode [ 2837.378480][T27461] veth1_vlan: entered promiscuous mode [ 2839.085422][T27461] veth0_macvtap: entered promiscuous mode [ 2839.098303][T27461] veth1_macvtap: entered promiscuous mode [ 2839.144032][T27461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2839.207979][T27461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2839.309719][T27461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2839.421760][T27461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2839.532476][T27461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2839.662393][T27461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2839.845918][T27461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2839.927441][T27742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4625'. [ 2840.113161][T27461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2840.147784][T27461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2840.157906][T27461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2840.168550][T27461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2840.178837][T27461] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2840.189656][T27461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2840.201599][T27461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2840.373618][ T42] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2840.435397][T27461] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2840.460486][T27461] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2840.469283][T27461] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2840.490254][T27461] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2840.629124][ T42] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2840.756202][ T42] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2840.877339][ T42] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2842.323714][T21578] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2842.342396][T21578] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2842.358993][T21578] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2842.367997][T21578] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2842.389558][T21578] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2842.397665][T21578] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2842.518119][T27766] rxe_eth0 speed is unknown, defaulting to 1000 [ 2843.008080][ T42] hsr_slave_0: left promiscuous mode [ 2843.017386][ T42] hsr_slave_1: left promiscuous mode [ 2843.041658][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2843.049164][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2843.059211][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2843.067246][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2843.076273][ T42] bridge_slave_1: left allmulticast mode [ 2843.085047][ T42] bridge_slave_1: left promiscuous mode [ 2843.091157][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 2843.101186][ T42] bridge_slave_0: left allmulticast mode [ 2843.106897][ T42] bridge_slave_0: left promiscuous mode [ 2843.113546][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 2843.181928][ T42] veth1_macvtap: left promiscuous mode [ 2843.187576][ T42] veth0_macvtap: left promiscuous mode [ 2843.195119][ T42] veth1_vlan: left promiscuous mode [ 2843.200560][ T42] veth0_vlan: left promiscuous mode [ 2846.073094][T21578] Bluetooth: hci0: command tx timeout [ 2846.306377][T27793] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4628'. [ 2846.371451][T18676] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2846.394850][T18676] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2846.417231][T18676] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2846.447228][T18676] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2846.455163][T18676] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2846.462601][T18676] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2846.870701][T27805] UDC core: g1: couldn't find an available UDC or it's busy [ 2849.484389][T21578] Bluetooth: hci0: command tx timeout [ 2849.489992][T21578] Bluetooth: hci1: command tx timeout [ 2850.111218][ T42] team0 (unregistering): Port device team_slave_1 removed [ 2850.214402][ T42] team0 (unregistering): Port device team_slave_0 removed [ 2850.321942][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2850.469568][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2851.244420][ T42] bond0 (unregistering): Released all slaves [ 2851.530474][T18676] Bluetooth: hci1: command tx timeout [ 2851.536056][T18676] Bluetooth: hci0: command tx timeout [ 2851.901389][T27800] rxe_eth0 speed is unknown, defaulting to 1000 [ 2852.670940][T27766] chnl_net:caif_netlink_parms(): no params data found [ 2853.610287][T18676] Bluetooth: hci0: command tx timeout [ 2853.615793][T18676] Bluetooth: hci1: command tx timeout [ 2855.691406][T21578] Bluetooth: hci1: command tx timeout [ 2855.737608][ T42] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2855.965641][ T42] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2856.085070][T27766] bridge0: port 1(bridge_slave_0) entered blocking state [ 2856.118219][T27766] bridge0: port 1(bridge_slave_0) entered disabled state [ 2856.126016][T27766] bridge_slave_0: entered allmulticast mode [ 2856.148875][T27766] bridge_slave_0: entered promiscuous mode [ 2856.265955][ T42] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2856.322907][T27766] bridge0: port 2(bridge_slave_1) entered blocking state [ 2856.370546][T27766] bridge0: port 2(bridge_slave_1) entered disabled state [ 2856.390700][T27766] bridge_slave_1: entered allmulticast mode [ 2856.440845][T27766] bridge_slave_1: entered promiscuous mode [ 2856.615566][ T42] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2856.770745][T27766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2856.831515][T27766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2857.192466][T27766] team0: Port device team_slave_0 added [ 2857.942096][T27766] team0: Port device team_slave_1 added [ 2858.172027][T27766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2858.190243][T27766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2860.102879][T27766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2860.141293][T27892] netlink: 'syz.3.4642': attribute type 72 has an invalid length. [ 2860.192219][T27766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2860.199240][T27766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2860.236914][T27892] UDC core: g1: couldn't find an available UDC or it's busy [ 2860.341086][T27766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2861.590557][T27800] chnl_net:caif_netlink_parms(): no params data found [ 2861.867131][T27766] hsr_slave_0: entered promiscuous mode [ 2861.877264][T27766] hsr_slave_1: entered promiscuous mode [ 2864.352730][T27800] bridge0: port 1(bridge_slave_0) entered blocking state [ 2864.360041][T27800] bridge0: port 1(bridge_slave_0) entered disabled state [ 2864.411602][T27800] bridge_slave_0: entered allmulticast mode [ 2864.419340][T27800] bridge_slave_0: entered promiscuous mode [ 2864.433729][T27800] bridge0: port 2(bridge_slave_1) entered blocking state [ 2864.451491][T27800] bridge0: port 2(bridge_slave_1) entered disabled state [ 2864.458834][T27800] bridge_slave_1: entered allmulticast mode [ 2864.499896][T27800] bridge_slave_1: entered promiscuous mode [ 2867.744391][T27800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2867.926674][T27800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2868.627338][T27800] team0: Port device team_slave_0 added [ 2868.726107][ T42] hsr_slave_0: left promiscuous mode [ 2868.738109][ T42] hsr_slave_1: left promiscuous mode [ 2868.810930][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2868.818425][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2868.861577][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2868.869077][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2868.916579][ T42] bridge_slave_1: left allmulticast mode [ 2868.925184][ T42] bridge_slave_1: left promiscuous mode [ 2868.950975][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 2868.961505][ T42] bridge_slave_0: left allmulticast mode [ 2868.967233][ T42] bridge_slave_0: left promiscuous mode [ 2869.000569][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 2869.181231][ T42] veth1_macvtap: left promiscuous mode [ 2869.186891][ T42] veth0_macvtap: left promiscuous mode [ 2869.200980][ T42] veth1_vlan: left promiscuous mode [ 2869.206401][ T42] veth0_vlan: left promiscuous mode [ 2870.792244][T27970] netlink: 'syz.3.4652': attribute type 72 has an invalid length. [ 2871.667084][T27973] UDC core: g1: couldn't find an available UDC or it's busy [ 2873.641593][T27983] loop6: detected capacity change from 0 to 256 [ 2873.654271][T27983] exfat: Unknown parameter 'ÿ18446744073709551615' [ 2875.384859][ T42] team0 (unregistering): Port device team_slave_1 removed [ 2876.019722][ T42] team0 (unregistering): Port device team_slave_0 removed [ 2876.282993][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2876.438395][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2877.319144][ T42] bond0 (unregistering): Released all slaves [ 2877.442840][T27800] team0: Port device team_slave_1 added [ 2877.690841][T27800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2877.697885][T27800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2877.784461][T27800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2878.598296][T27800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2878.608797][T27800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2878.635775][T27800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2879.065275][T27800] hsr_slave_0: entered promiscuous mode [ 2879.100918][T27800] hsr_slave_1: entered promiscuous mode [ 2879.149926][T27800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2879.170288][T27800] Cannot create hsr debugfs directory [ 2879.609920][T28017] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input31 [ 2881.101703][T27766] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2881.143287][T27766] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2883.092720][T27766] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2883.158394][T27766] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2883.515741][T27766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2884.210071][T27766] 8021q: adding VLAN 0 to HW filter on device team0 [ 2884.479584][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 2884.486886][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2884.694520][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 2884.701808][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2884.897082][T28055] netlink: 'syz.6.4667': attribute type 72 has an invalid length. [ 2884.977528][T27800] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2885.016721][T28054] UDC core: g1: couldn't find an available UDC or it's busy [ 2885.067058][T27800] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2885.197644][T27800] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2885.255011][T27800] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2886.334764][T27800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2886.356186][T27800] 8021q: adding VLAN 0 to HW filter on device team0 [ 2886.398653][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 2886.405887][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2886.478699][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 2886.485977][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2888.477285][T27766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2890.788174][T27800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2891.256230][T27766] veth0_vlan: entered promiscuous mode [ 2891.299051][T27766] veth1_vlan: entered promiscuous mode [ 2891.442236][T27766] veth0_macvtap: entered promiscuous mode [ 2891.491758][T27766] veth1_macvtap: entered promiscuous mode [ 2891.551866][T27766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2891.590224][T27766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2891.649249][T27766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2891.680270][T27766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2891.712267][T27766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2891.743222][T27766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2891.763377][T27766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2891.790460][T27766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2891.807515][T27766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2891.887599][T27766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2892.417134][T27766] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2892.507697][T27766] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2892.593652][T27766] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2892.670840][T27766] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2893.033334][T27800] veth0_vlan: entered promiscuous mode [ 2893.093380][T27800] veth1_vlan: entered promiscuous mode [ 2893.204564][T27800] veth0_macvtap: entered promiscuous mode [ 2893.244848][T27800] veth1_macvtap: entered promiscuous mode [ 2893.393302][T28129] syz_tun: entered allmulticast mode [ 2893.410037][T27800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2893.425372][T27800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2893.464990][T27800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2893.581022][T27800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2893.638526][T27800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2893.675433][T27800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2893.750560][T27800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2893.838079][T28127] syz_tun: left allmulticast mode [ 2894.105094][T27800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2894.227702][T27800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2894.250661][T27800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2894.290563][T27800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2894.386193][T27800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2894.430396][T27800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2894.461335][T27800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2894.630881][ T1115] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2894.711889][T27800] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2894.729146][T27800] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2894.754550][T27800] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2894.769178][T27800] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2894.841561][ T1115] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2894.919705][ T1115] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2895.316565][ T1115] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2896.744119][T18676] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2896.781564][T18676] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2896.791695][T18676] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2896.799998][T18676] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2896.810575][T18676] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2896.820717][T18676] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2896.949085][T28182] rxe_eth0 speed is unknown, defaulting to 1000 [ 2897.112570][ T1115] hsr_slave_0: left promiscuous mode [ 2897.135845][ T1115] hsr_slave_1: left promiscuous mode [ 2897.155661][ T1115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2897.170266][ T1115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2897.182925][ T1115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2897.200329][ T1115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2897.211481][ T1115] bridge_slave_1: left allmulticast mode [ 2897.217480][ T1115] bridge_slave_1: left promiscuous mode [ 2897.240457][ T1115] bridge0: port 2(bridge_slave_1) entered disabled state [ 2897.261214][ T1115] bridge_slave_0: left allmulticast mode [ 2897.266940][ T1115] bridge_slave_0: left promiscuous mode [ 2897.280479][ T1115] bridge0: port 1(bridge_slave_0) entered disabled state [ 2897.371611][ T1115] veth1_macvtap: left promiscuous mode [ 2897.377259][ T1115] veth0_macvtap: left promiscuous mode [ 2897.390456][ T1115] veth1_vlan: left promiscuous mode [ 2897.395861][ T1115] veth0_vlan: left promiscuous mode [ 2897.942866][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.949289][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2899.560595][T18676] Bluetooth: hci0: command tx timeout [ 2900.882398][T18676] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2900.927532][T18676] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2900.940505][T18676] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2900.968558][T18676] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2900.980254][T18676] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2900.987677][T18676] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2901.502102][T28213] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4676'. [ 2901.670803][T18676] Bluetooth: hci0: command tx timeout [ 2902.340083][T28221] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4681'. [ 2902.409536][ T1115] team0 (unregistering): Port device team_slave_1 removed [ 2902.562680][ T1115] team0 (unregistering): Port device team_slave_0 removed [ 2902.708487][ T1115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2902.862066][ T1115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2903.052043][T18676] Bluetooth: hci1: command tx timeout [ 2903.692041][T18676] Bluetooth: hci0: command tx timeout [ 2903.806910][ T1115] bond0 (unregistering): Released all slaves [ 2904.058180][T28208] rxe_eth0 speed is unknown, defaulting to 1000 [ 2904.546636][T28182] chnl_net:caif_netlink_parms(): no params data found [ 2905.130418][T18676] Bluetooth: hci1: command tx timeout [ 2905.648985][T28251] loop3: detected capacity change from 0 to 512 [ 2905.657484][T28251] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2905.720768][T28251] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.4687: inode has both inline data and extents flags [ 2905.734506][T28251] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.4687: couldn't read orphan inode 15 (err -117) [ 2905.748319][T28251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2905.770292][T18676] Bluetooth: hci0: command tx timeout [ 2905.810598][T28182] bridge0: port 1(bridge_slave_0) entered blocking state [ 2905.818404][T28182] bridge0: port 1(bridge_slave_0) entered disabled state [ 2905.826296][T28182] bridge_slave_0: entered allmulticast mode [ 2906.046044][T28251] EXT4-fs error (device loop3): ext4_add_entry:2488: inode #2: comm syz.3.4687: Directory hole found for htree leaf block 0 [ 2906.055188][T28182] bridge_slave_0: entered promiscuous mode [ 2906.088312][T28251] hub 5-0:1.0: USB hub found [ 2906.098348][T28251] hub 5-0:1.0: 1 port detected [ 2906.195781][T28182] bridge0: port 2(bridge_slave_1) entered blocking state [ 2906.214850][T28182] bridge0: port 2(bridge_slave_1) entered disabled state [ 2906.230644][T28182] bridge_slave_1: entered allmulticast mode [ 2906.248610][T28182] bridge_slave_1: entered promiscuous mode [ 2906.377784][T15862] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2906.489373][ T1115] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2908.129608][T18676] Bluetooth: hci1: command tx timeout [ 2908.217630][T28182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2908.349261][ T1115] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2908.395589][T28182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2908.527269][ T1115] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2908.620703][T28208] chnl_net:caif_netlink_parms(): no params data found [ 2908.857611][ T1115] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2909.651603][T28182] team0: Port device team_slave_0 added [ 2909.738799][T28182] team0: Port device team_slave_1 added [ 2909.880388][T28182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2909.887419][T28182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2909.914130][T28182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2909.927515][T28182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2909.936887][T28182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2909.964068][T28182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2910.170532][T18676] Bluetooth: hci1: command tx timeout [ 2910.243839][T28208] bridge0: port 1(bridge_slave_0) entered blocking state [ 2910.275621][T28208] bridge0: port 1(bridge_slave_0) entered disabled state [ 2910.290512][T28208] bridge_slave_0: entered allmulticast mode [ 2910.313908][T28208] bridge_slave_0: entered promiscuous mode [ 2910.386971][T28208] bridge0: port 2(bridge_slave_1) entered blocking state [ 2910.430450][T28208] bridge0: port 2(bridge_slave_1) entered disabled state [ 2910.452834][T28208] bridge_slave_1: entered allmulticast mode [ 2910.480701][T28208] bridge_slave_1: entered promiscuous mode [ 2910.535528][T28182] hsr_slave_0: entered promiscuous mode [ 2910.575851][T28182] hsr_slave_1: entered promiscuous mode [ 2911.654967][T28208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2912.699560][T28208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2913.286989][T28208] team0: Port device team_slave_0 added [ 2915.308262][T28208] team0: Port device team_slave_1 added [ 2917.182819][T28208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2917.189951][T28208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2917.240198][T28208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2917.436996][T28208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2917.449332][T28208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2917.502844][T28208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2917.816211][T28208] hsr_slave_0: entered promiscuous mode [ 2917.844982][T28208] hsr_slave_1: entered promiscuous mode [ 2917.852253][T28208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2917.859881][T28208] Cannot create hsr debugfs directory [ 2920.146569][ T1115] hsr_slave_0: left promiscuous mode [ 2920.230542][ T1115] hsr_slave_1: left promiscuous mode [ 2921.014580][ T1115] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2921.100708][ T1115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2921.141820][ T1115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2921.149324][ T1115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2921.282924][ T1115] bridge_slave_1: left allmulticast mode [ 2921.288685][ T1115] bridge_slave_1: left promiscuous mode [ 2921.326878][ T1115] bridge0: port 2(bridge_slave_1) entered disabled state [ 2921.340881][ T1115] bridge_slave_0: left allmulticast mode [ 2921.346662][ T1115] bridge_slave_0: left promiscuous mode [ 2921.358942][ T1115] bridge0: port 1(bridge_slave_0) entered disabled state [ 2923.046779][ T1115] veth1_macvtap: left promiscuous mode [ 2923.060542][ T1115] veth0_macvtap: left promiscuous mode [ 2923.072026][ T1115] veth1_vlan: left promiscuous mode [ 2923.084286][ T1115] veth0_vlan: left promiscuous mode [ 2927.357139][ T1115] team0 (unregistering): Port device team_slave_1 removed [ 2927.462342][ T1115] team0 (unregistering): Port device team_slave_0 removed [ 2927.554965][ T1115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2927.645054][ T1115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2929.183217][ T1115] bond0 (unregistering): Released all slaves [ 2930.681221][T28208] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2930.752320][T28208] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2930.765175][T28208] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2930.813353][T28208] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2933.589157][T28182] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2933.655814][T28182] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2933.688966][T28182] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2933.734302][T28182] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2933.912643][T28208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2934.016508][T28208] 8021q: adding VLAN 0 to HW filter on device team0 [ 2934.105838][ T750] bridge0: port 1(bridge_slave_0) entered blocking state [ 2934.113148][ T750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2934.168872][ T750] bridge0: port 2(bridge_slave_1) entered blocking state [ 2934.176466][ T750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2934.375661][T28182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2934.439564][T28208] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2934.496725][T28182] 8021q: adding VLAN 0 to HW filter on device team0 [ 2934.613284][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 2934.620576][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2934.643241][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 2934.650607][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2935.236942][T28208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2935.455510][T28502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4726'. [ 2935.525059][T28502] bridge_slave_1: left allmulticast mode [ 2935.550289][T28502] bridge_slave_1: left promiscuous mode [ 2935.585136][T28502] bridge0: port 2(bridge_slave_1) entered disabled state [ 2935.624806][T28502] bridge_slave_0: left allmulticast mode [ 2935.642556][T28502] bridge_slave_0: left promiscuous mode [ 2935.660205][T28502] bridge0: port 1(bridge_slave_0) entered disabled state [ 2935.968114][T28182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2938.488898][T28208] veth0_vlan: entered promiscuous mode [ 2938.553132][T28208] veth1_vlan: entered promiscuous mode [ 2938.741143][T28208] veth0_macvtap: entered promiscuous mode [ 2938.794086][T28208] veth1_macvtap: entered promiscuous mode [ 2938.802604][T28182] veth0_vlan: entered promiscuous mode [ 2938.865119][T28182] veth1_vlan: entered promiscuous mode [ 2938.902994][T28208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2938.915239][T28208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2938.926124][T28208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2938.937063][T28208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2938.973149][T28208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2939.045138][T28208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2939.066209][T28208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2939.104475][T28208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2939.120288][T28208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2939.151785][T28208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2939.181101][T28182] veth0_macvtap: entered promiscuous mode [ 2939.253909][T28208] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2939.302807][T28208] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2939.320218][T28208] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2939.329012][T28208] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2939.441779][T28182] veth1_macvtap: entered promiscuous mode [ 2939.665100][T28182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2939.720255][T28182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2939.746252][T28182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2939.758195][T28182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2939.768774][T28182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2939.780381][T28182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2939.812023][T28182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2939.849306][T28182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2939.877905][T28182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2939.889522][T28182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2939.923627][T28182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2939.935533][T28182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2939.960318][T28182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2939.984218][T28182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2940.082930][T28182] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2940.103970][T28182] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2940.119338][T28182] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2940.129045][T28182] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2942.965022][ T42] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2943.423064][ T42] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2943.678299][ T42] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2944.067353][ T42] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2944.394680][T21578] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2944.410029][T21578] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2944.433589][T21578] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2944.444309][T21578] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2944.500618][T21578] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2944.510528][T21578] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2944.689471][T28560] rxe_eth0 speed is unknown, defaulting to 1000 [ 2947.194006][T18676] Bluetooth: hci0: command tx timeout [ 2949.630258][T18676] Bluetooth: hci0: command tx timeout [ 2950.071506][T21578] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2950.094757][T21578] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2950.107172][T21578] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2950.119030][T28560] chnl_net:caif_netlink_parms(): no params data found [ 2950.175317][T21578] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2950.185684][T21578] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2950.204423][T21578] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2950.984469][T28595] rxe_eth0 speed is unknown, defaulting to 1000 [ 2951.110470][T28560] bridge0: port 1(bridge_slave_0) entered blocking state [ 2951.160280][T28560] bridge0: port 1(bridge_slave_0) entered disabled state [ 2951.181986][T28560] bridge_slave_0: entered allmulticast mode [ 2951.215155][T28560] bridge_slave_0: entered promiscuous mode [ 2951.244933][T28560] bridge0: port 2(bridge_slave_1) entered blocking state [ 2951.277941][T28560] bridge0: port 2(bridge_slave_1) entered disabled state [ 2951.304554][T28560] bridge_slave_1: entered allmulticast mode [ 2951.329639][T28560] bridge_slave_1: entered promiscuous mode [ 2951.456328][T28560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2951.499613][T28560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2951.705090][T21578] Bluetooth: hci0: command tx timeout [ 2951.915678][T28560] team0: Port device team_slave_0 added [ 2952.044542][ T42] hsr_slave_0: left promiscuous mode [ 2952.056462][ T42] hsr_slave_1: left promiscuous mode [ 2952.067835][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2952.077377][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2952.086025][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2952.096651][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2952.108074][ T42] bridge_slave_1: left allmulticast mode [ 2952.117555][ T42] bridge_slave_1: left promiscuous mode [ 2952.129109][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 2952.146907][ T42] bridge_slave_0: left allmulticast mode [ 2952.155116][ T42] bridge_slave_0: left promiscuous mode [ 2952.170595][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 2952.287521][ T42] veth1_macvtap: left promiscuous mode [ 2952.296839][ T42] veth0_macvtap: left promiscuous mode [ 2952.303808][T28630] loop3: detected capacity change from 0 to 512 [ 2952.310495][ T42] veth1_vlan: left promiscuous mode [ 2952.315950][T28630] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2952.316198][ T42] veth0_vlan: left promiscuous mode [ 2952.360633][T28630] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.4745: inode has both inline data and extents flags [ 2952.378561][T28630] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.4745: couldn't read orphan inode 15 (err -117) [ 2952.396319][T28630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2952.413962][T21578] Bluetooth: hci1: command tx timeout [ 2953.393034][T15862] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2953.693075][T28642] loop3: detected capacity change from 0 to 256 [ 2953.770248][T21578] Bluetooth: hci0: command tx timeout [ 2955.400868][T21578] Bluetooth: hci1: command tx timeout [ 2957.450488][T21578] Bluetooth: hci1: command tx timeout [ 2959.380733][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.387253][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2959.408045][T28663] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.548889][T18676] Bluetooth: hci1: command tx timeout [ 2959.648360][T28664] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 2959.745327][T28665] i2c i2c-0: new_device: Missing parameters [ 2960.169675][ T42] team0 (unregistering): Port device team_slave_1 removed [ 2960.287006][ T42] team0 (unregistering): Port device team_slave_0 removed [ 2960.422461][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2960.550933][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2963.774786][T28678] loop3: detected capacity change from 0 to 256 [ 2963.907200][T28681] Bluetooth: MGMT ver 1.22 [ 2963.915445][ T42] bond0 (unregistering): Released all slaves [ 2964.120027][T28560] team0: Port device team_slave_1 added [ 2964.177319][T28560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2964.191759][T28560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2964.242400][T28560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2964.290024][T28560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2964.313179][T28560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2964.347254][T28560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2965.615353][T28560] hsr_slave_0: entered promiscuous mode [ 2965.643854][T28560] hsr_slave_1: entered promiscuous mode [ 2965.677046][T28560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2965.685905][T28560] Cannot create hsr debugfs directory [ 2966.025995][T28595] chnl_net:caif_netlink_parms(): no params data found [ 2968.036247][ T42] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2968.515684][ T42] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2970.592261][ T42] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2970.667857][T28595] bridge0: port 1(bridge_slave_0) entered blocking state [ 2970.675642][T28595] bridge0: port 1(bridge_slave_0) entered disabled state [ 2970.700772][T28595] bridge_slave_0: entered allmulticast mode [ 2970.721438][T28595] bridge_slave_0: entered promiscuous mode [ 2970.732518][T28595] bridge0: port 2(bridge_slave_1) entered blocking state [ 2970.739734][T28595] bridge0: port 2(bridge_slave_1) entered disabled state [ 2970.770855][T28595] bridge_slave_1: entered allmulticast mode [ 2970.780317][T28595] bridge_slave_1: entered promiscuous mode [ 2971.004168][ T42] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2971.109409][T28595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2971.165078][T28595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2971.334239][T28595] team0: Port device team_slave_0 added [ 2971.349739][T28595] team0: Port device team_slave_1 added [ 2973.029656][T28595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2973.037344][T28595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2973.070680][T28595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2974.327971][T28595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2974.382680][T28595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2974.650226][T28595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2974.776741][T28595] hsr_slave_0: entered promiscuous mode [ 2974.801584][T28595] hsr_slave_1: entered promiscuous mode [ 2974.819052][T28595] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2974.840385][T28595] Cannot create hsr debugfs directory [ 2975.013024][T28560] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2975.166438][T28560] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2975.203360][T28560] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2975.417165][T28560] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2975.739628][T28743] ieee802154 phy0 wpan0: encryption failed: -22 [ 2975.804989][T28743] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 2975.816997][T28743] i2c i2c-0: new_device: Missing parameters [ 2976.799207][T28747] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4769'. [ 2978.394825][T28560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2978.539631][T28560] 8021q: adding VLAN 0 to HW filter on device team0 [ 2978.584072][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 2978.591315][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2978.724304][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 2978.731554][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2979.778612][ T42] hsr_slave_0: left promiscuous mode [ 2980.130837][ T42] hsr_slave_1: left promiscuous mode [ 2980.381329][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2980.850441][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2980.891253][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2980.898764][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2980.939402][T28782] loop3: detected capacity change from 0 to 512 [ 2981.007163][ T42] bridge_slave_1: left allmulticast mode [ 2981.013978][ T42] bridge_slave_1: left promiscuous mode [ 2981.019819][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 2981.047904][T28782] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2981.131045][T28782] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.4776: inode has both inline data and extents flags [ 2981.238759][T28782] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.4776: couldn't read orphan inode 15 (err -117) [ 2981.275550][T28782] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2981.401454][ T42] bridge_slave_0: left allmulticast mode [ 2981.407202][ T42] bridge_slave_0: left promiscuous mode [ 2981.440475][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 2983.333728][ T42] veth1_macvtap: left promiscuous mode [ 2983.339389][ T42] veth0_macvtap: left promiscuous mode [ 2983.353267][ T42] veth1_vlan: left promiscuous mode [ 2983.368754][ T42] veth0_vlan: left promiscuous mode [ 2983.439228][T15862] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2983.784079][T28800] ieee802154 phy0 wpan0: encryption failed: -22 [ 2983.878117][T28801] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 2983.917157][T28801] i2c i2c-0: new_device: Missing parameters [ 2988.465440][ T42] team0 (unregistering): Port device team_slave_1 removed [ 2988.602553][ T42] team0 (unregistering): Port device team_slave_0 removed [ 2988.780816][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2988.948517][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2990.074317][ T42] bond0 (unregistering): Released all slaves [ 2990.224739][T28807] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4781'. [ 2992.197256][T28560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2992.288174][ T5877] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 2992.322021][T28595] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2992.372981][T28595] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2992.452283][T28595] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2992.486446][T28595] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2992.518813][ T5877] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 2992.530896][ T5877] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 2992.574340][ T5877] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2992.603854][ T5877] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2992.650336][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2992.668877][ T5877] usb 4-1: Product: syz [ 2992.679014][ T5877] usb 4-1: Manufacturer: syz [ 2992.689159][ T5877] usb 4-1: SerialNumber: syz [ 2992.697905][ T5877] usb 4-1: config 0 descriptor?? [ 2992.707057][T28815] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2992.727738][ T5877] usb 4-1: selecting invalid altsetting 0 [ 2992.986581][T28815] usb 4-1: BOGUS urb xfer, pipe 0 != type 1 [ 2993.081765][T28595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2993.145964][ T5877] usb 4-1: USB disconnect, device number 74 [ 2993.146013][ C1] usb 4-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 2993.170540][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 2993.200027][T28595] 8021q: adding VLAN 0 to HW filter on device team0 [ 2993.333339][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state [ 2993.340669][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2993.387170][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state [ 2993.394466][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2993.623246][T28560] veth0_vlan: entered promiscuous mode [ 2993.643833][T28560] veth1_vlan: entered promiscuous mode [ 2993.794920][T28560] veth0_macvtap: entered promiscuous mode [ 2993.835595][T28560] veth1_macvtap: entered promiscuous mode [ 2993.886832][T28560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2995.582721][T28560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2995.620341][T28560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2995.630942][T28560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2995.646702][T28560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2995.719506][T28560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2995.742944][T28560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2995.757786][T28560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2995.776163][T28560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2995.821919][T28560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2995.919994][T28560] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2995.960155][T28560] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2995.968957][T28560] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2996.016786][T28560] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2996.233796][T28595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2999.771817][ T750] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2999.903321][T28595] veth0_vlan: entered promiscuous mode [ 2999.947812][T28595] veth1_vlan: entered promiscuous mode [ 3000.087937][T28595] veth0_macvtap: entered promiscuous mode [ 3000.162312][T28595] veth1_macvtap: entered promiscuous mode [ 3000.296094][ T750] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3000.493517][ T750] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3000.543911][T28595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3000.588181][T28595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.610206][T28595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3000.630526][T28595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.645217][T28595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3000.656189][T28595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.707155][T28595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3000.741483][T28595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3000.773494][T28595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.793507][T28595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3000.827967][T28595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.864702][T28595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3000.890595][T28595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.907204][T28595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3001.197550][ T750] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3001.768872][T28595] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3001.811791][T28595] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3001.830374][T28595] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3001.839180][T28595] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3004.514496][T28929] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 3004.523716][T28925] i2c i2c-0: new_device: Can't parse I2C address [ 3004.541452][T28926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4791'. [ 3004.800604][T28933] ieee802154 phy0 wpan0: encryption failed: -22 [ 3006.777214][T28933] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 3006.828556][T28933] i2c i2c-0: new_device: Missing parameters [ 3007.008076][T21578] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3007.025628][T21578] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3007.040462][T21578] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3007.051993][T21578] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3007.060448][T21578] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3007.082019][T21578] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3007.345685][T28944] rxe_eth0 speed is unknown, defaulting to 1000 [ 3008.451257][T28944] chnl_net:caif_netlink_parms(): no params data found [ 3008.702257][T28944] bridge0: port 1(bridge_slave_0) entered blocking state [ 3008.709598][T28944] bridge0: port 1(bridge_slave_0) entered disabled state [ 3008.724255][T28944] bridge_slave_0: entered allmulticast mode [ 3008.764201][T28944] bridge_slave_0: entered promiscuous mode [ 3008.808892][T28944] bridge0: port 2(bridge_slave_1) entered blocking state [ 3008.830644][T28944] bridge0: port 2(bridge_slave_1) entered disabled state [ 3008.838356][T28944] bridge_slave_1: entered allmulticast mode [ 3008.846630][T28944] bridge_slave_1: entered promiscuous mode [ 3008.861037][ T750] hsr_slave_0: left promiscuous mode [ 3008.869724][ T750] hsr_slave_1: left promiscuous mode [ 3008.876846][ T750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3008.884542][ T750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3008.893149][ T750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3008.900723][ T750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3008.908806][ T750] bridge_slave_1: left allmulticast mode [ 3008.914673][ T750] bridge_slave_1: left promiscuous mode [ 3008.920542][ T750] bridge0: port 2(bridge_slave_1) entered disabled state [ 3008.930651][ T750] bridge_slave_0: left allmulticast mode [ 3008.936384][ T750] bridge_slave_0: left promiscuous mode [ 3008.942399][ T750] bridge0: port 1(bridge_slave_0) entered disabled state [ 3008.982934][ T750] veth1_macvtap: left promiscuous mode [ 3008.988558][ T750] veth0_macvtap: left promiscuous mode [ 3008.996085][ T750] veth1_vlan: left promiscuous mode [ 3009.001494][ T750] veth0_vlan: left promiscuous mode [ 3009.141897][T21578] Bluetooth: hci0: command tx timeout [ 3011.221797][T21578] Bluetooth: hci0: command tx timeout [ 3011.758794][T18676] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3011.771496][T18676] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3011.783738][T18676] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3011.792313][T18676] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3011.802533][T18676] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3011.810046][T18676] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3014.390901][T21578] Bluetooth: hci0: command tx timeout [ 3014.392119][T18676] Bluetooth: hci1: command tx timeout [ 3014.499473][ T750] team0 (unregistering): Port device team_slave_1 removed [ 3015.289800][ T750] team0 (unregistering): Port device team_slave_0 removed [ 3015.812159][ T750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3016.012541][ T750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3016.369494][T29008] ieee802154 phy0 wpan0: encryption failed: -22 [ 3016.410347][T18676] Bluetooth: hci1: command tx timeout [ 3016.420329][T18676] Bluetooth: hci0: command tx timeout [ 3016.481242][T29009] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 3016.515540][T29009] i2c i2c-0: new_device: Can't parse I2C address [ 3017.302471][ T750] bond0 (unregistering): Released all slaves [ 3017.631604][T29004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4801'. [ 3017.716008][T28944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3017.771925][T29012] loop6: detected capacity change from 0 to 512 [ 3017.785876][T28944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3017.791457][T29012] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3017.829106][T29012] EXT4-fs error (device loop6): ext4_orphan_get:1408: inode #15: comm syz.6.4802: inode has both inline data and extents flags [ 3017.843696][T29012] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.4802: couldn't read orphan inode 15 (err -117) [ 3017.869385][T29012] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3018.081160][T28991] rxe_eth0 speed is unknown, defaulting to 1000 [ 3018.163336][T29016] EXT4-fs error (device loop6): ext4_add_entry:2488: inode #2: comm syz.6.4802: Directory hole found for htree leaf block 0 [ 3018.223178][T29017] hub 5-0:1.0: USB hub found [ 3018.228169][T29017] hub 5-0:1.0: 1 port detected [ 3018.490553][T18676] Bluetooth: hci1: command tx timeout [ 3018.776728][T28944] team0: Port device team_slave_0 added [ 3018.828281][T28944] team0: Port device team_slave_1 added [ 3020.590307][T18676] Bluetooth: hci1: command tx timeout [ 3020.606695][T28944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3020.620494][T28944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3020.720173][T28944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3020.751616][T17992] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3020.793661][T28944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3020.821231][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.827658][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 3020.869442][T28944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3021.030370][T28944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3021.122789][T29031] ieee802154 phy0 wpan0: encryption failed: -22 [ 3021.206552][T29031] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 3021.217503][T29031] i2c i2c-0: new_device: Can't parse I2C address [ 3021.262841][T28944] hsr_slave_0: entered promiscuous mode [ 3021.301200][T28944] hsr_slave_1: entered promiscuous mode [ 3022.036692][ T750] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3022.205976][T28991] chnl_net:caif_netlink_parms(): no params data found [ 3023.243164][ T750] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3023.589658][ T750] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3024.083394][ T750] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3024.508848][T28991] bridge0: port 1(bridge_slave_0) entered blocking state [ 3024.555539][T28991] bridge0: port 1(bridge_slave_0) entered disabled state [ 3024.572125][T28991] bridge_slave_0: entered allmulticast mode [ 3024.628581][T28991] bridge_slave_0: entered promiscuous mode [ 3025.195590][T28991] bridge0: port 2(bridge_slave_1) entered blocking state [ 3025.306869][T28991] bridge0: port 2(bridge_slave_1) entered disabled state [ 3025.332753][T28991] bridge_slave_1: entered allmulticast mode [ 3026.974920][T28991] bridge_slave_1: entered promiscuous mode [ 3027.129756][T28991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3027.211405][T28991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3027.548492][T28991] team0: Port device team_slave_0 added [ 3027.696005][T28991] team0: Port device team_slave_1 added [ 3027.863804][T28991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3027.914023][T28991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3027.991608][T28991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3028.259697][T28991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3028.345571][T28991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3028.564054][T28991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3030.302762][T29094] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4811'. [ 3030.411615][T29102] ieee802154 phy0 wpan0: encryption failed: -22 [ 3030.428426][T28991] hsr_slave_0: entered promiscuous mode [ 3030.483684][T28991] hsr_slave_1: entered promiscuous mode [ 3030.501480][T28991] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3030.514028][T29104] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 3030.524680][T28991] Cannot create hsr debugfs directory [ 3030.560561][T29104] i2c i2c-0: new_device: Can't parse I2C address [ 3032.327229][T28944] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 3032.495527][T29119] ieee802154 phy0 wpan0: encryption failed: -22 [ 3032.504051][T28944] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 3032.591351][T29119] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 3032.599360][T29119] i2c i2c-0: new_device: Can't parse I2C address [ 3032.760787][T28944] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 3032.939812][T28944] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 3036.588537][T28944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3036.705444][T28944] 8021q: adding VLAN 0 to HW filter on device team0 [ 3036.846185][ T750] hsr_slave_0: left promiscuous mode [ 3036.870986][ T750] hsr_slave_1: left promiscuous mode [ 3037.150580][ T750] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3037.164984][ T750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3037.232534][ T750] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3037.240023][ T750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3037.922107][ T750] bridge_slave_1: left allmulticast mode [ 3037.927839][ T750] bridge_slave_1: left promiscuous mode [ 3037.980539][ T750] bridge0: port 2(bridge_slave_1) entered disabled state [ 3038.081902][ T750] bridge_slave_0: left allmulticast mode [ 3038.087699][ T750] bridge_slave_0: left promiscuous mode [ 3038.136372][ T750] bridge0: port 1(bridge_slave_0) entered disabled state [ 3038.465888][ T750] veth1_macvtap: left promiscuous mode [ 3038.480840][ T750] veth0_macvtap: left promiscuous mode [ 3038.486653][ T750] veth1_vlan: left promiscuous mode [ 3038.540313][ T750] veth0_vlan: left promiscuous mode [ 3041.161687][T29179] loop6: detected capacity change from 0 to 256 [ 3044.333109][T29185] ieee802154 phy0 wpan0: encryption failed: -22 [ 3044.448747][T29186] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 3044.490910][T29186] i2c i2c-0: new_device: Extra parameters [ 3045.221518][ T750] team0 (unregistering): Port device team_slave_1 removed [ 3045.384534][ T750] team0 (unregistering): Port device team_slave_0 removed [ 3045.562254][ T750] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3045.754158][ T750] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3046.637034][ T750] bond0 (unregistering): Released all slaves [ 3046.787297][T29172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4820'. [ 3046.876388][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 3046.883607][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3046.912156][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 3046.919385][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3047.009616][T29192] ieee802154 phy0 wpan0: encryption failed: -22 [ 3047.161096][T29195] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 3047.195182][T29192] i2c i2c-0: new_device: Can't parse I2C address [ 3047.328779][T28944] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3047.340433][T28944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3047.877552][T28991] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 3047.899182][T28991] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 3047.918337][T28991] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 3047.934705][T28991] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 3048.021088][T22505] usb 7-1: new full-speed USB device number 78 using dummy_hcd [ 3048.042529][T28944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3048.354873][T28991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3048.518388][T28991] 8021q: adding VLAN 0 to HW filter on device team0 [ 3048.594111][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 3048.601396][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3048.662638][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 3048.669867][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3049.551269][T28944] veth0_vlan: entered promiscuous mode [ 3049.619178][T28944] veth1_vlan: entered promiscuous mode [ 3049.938948][T28944] veth0_macvtap: entered promiscuous mode [ 3049.966653][T22505] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 3049.994638][T28944] veth1_macvtap: entered promiscuous mode [ 3050.010332][T22505] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 3050.045958][T22505] usb 7-1: config 0 interface 0 has no altsetting 0 [ 3050.258313][T28944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3050.277261][T22505] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3050.358887][T28944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3050.431305][T22505] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 3050.469043][T28944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3050.531148][T22505] usb 7-1: Product: syz [ 3050.544238][T22505] usb 7-1: Manufacturer: syz [ 3050.569017][T28944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3050.685942][T22505] usb 7-1: SerialNumber: syz [ 3050.739722][T28944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3050.751544][T22505] usb 7-1: config 0 descriptor?? [ 3050.805146][T28991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3050.813672][T22505] usb 7-1: can't set config #0, error -71 [ 3050.829244][T28944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3050.861891][T22505] usb 7-1: USB disconnect, device number 78 [ 3050.880340][T28944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3050.945534][T28944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3050.980268][T28944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3051.006226][T28944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3051.118809][T28944] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3051.150211][T28944] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3051.159122][T28944] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3051.193533][T28944] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3052.033137][T29252] ieee802154 phy0 wpan0: encryption failed: -22 [ 3052.123453][T29252] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 3052.157958][T29252] i2c i2c-0: new_device: Extra parameters [ 3052.385716][ T61] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3052.488278][T28991] veth0_vlan: entered promiscuous mode [ 3052.564690][T28991] veth1_vlan: entered promiscuous mode [ 3052.688617][ T61] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3052.902208][ T61] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3053.014810][ T61] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3053.111446][T28991] veth0_macvtap: entered promiscuous mode [ 3053.137878][T28991] veth1_macvtap: entered promiscuous mode [ 3053.189089][T28991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3053.199931][T28991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3053.234073][T28991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3053.263551][T28991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3053.292915][T28991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3053.304347][T28991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3053.324633][T28991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3053.344399][T28991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3053.376988][T28991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3053.388075][T28991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3053.421664][T28991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3053.441663][T28991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3053.470219][T28991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3053.491579][T28991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3053.508493][T28991] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3053.517399][T28991] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3053.526407][T28991] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3053.540300][T28991] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3054.591719][T29265] ieee802154 phy0 wpan0: encryption failed: -22 [ 3054.728894][T29265] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 3054.738031][T29265] i2c i2c-0: new_device: Extra parameters [ 3056.419169][T29282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3056.440260][T29282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3056.464099][T29282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3056.475442][T29282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3056.500466][T29282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3056.508199][T29282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3057.925259][T29279] rxe_eth0 speed is unknown, defaulting to 1000 [ 3058.570895][T18676] Bluetooth: hci0: command tx timeout [ 3058.656036][T29297] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4836'. [ 3059.082955][ T61] hsr_slave_0: left promiscuous mode [ 3059.089312][ T61] hsr_slave_1: left promiscuous mode [ 3060.297966][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3060.305725][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3060.340821][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3060.391413][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3060.420924][ T61] bridge_slave_1: left allmulticast mode [ 3060.426678][ T61] bridge_slave_1: left promiscuous mode [ 3060.455431][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 3060.468708][ T61] bridge_slave_0: left allmulticast mode [ 3060.491997][ T61] bridge_slave_0: left promiscuous mode [ 3060.497872][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 3060.571136][T29282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3060.609122][T14971] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 3060.629526][T29282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3060.643405][ T61] veth1_macvtap: left promiscuous mode [ 3060.649040][ T61] veth0_macvtap: left promiscuous mode [ 3060.654730][T29282] Bluetooth: hci0: command tx timeout [ 3060.664229][T29282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3060.671123][ T61] veth1_vlan: left promiscuous mode [ 3060.678001][T29314] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3060.679763][ T61] veth0_vlan: left promiscuous mode [ 3060.693497][T29314] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3060.702635][T29314] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3060.836578][T14971] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 3060.850851][T14971] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 3060.879061][T14971] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3060.902581][T14971] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 3060.924632][T14971] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 3060.967445][T14971] usb 4-1: Product: syz [ 3060.975631][T14971] usb 4-1: Manufacturer: syz [ 3060.987773][T14971] usb 4-1: SerialNumber: syz [ 3061.006198][T14971] usb 4-1: config 0 descriptor?? [ 3061.012218][T29310] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3061.041292][T14971] usb 4-1: selecting invalid altsetting 0 [ 3061.415742][T27381] usb 4-1: USB disconnect, device number 75 [ 3061.415755][ C0] usb 4-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 3063.206461][T18676] Bluetooth: hci1: command tx timeout [ 3063.210459][T29314] Bluetooth: hci0: command tx timeout [ 3064.727926][T29327] ieee802154 phy0 wpan0: encryption failed: -22 [ 3064.802571][T29328] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 3064.835648][T29328] i2c i2c-0: new_device: Extra parameters [ 3065.190406][ T61] team0 (unregistering): Port device team_slave_1 removed [ 3065.290271][T29314] Bluetooth: hci0: command tx timeout [ 3065.313273][T29314] Bluetooth: hci1: command tx timeout [ 3065.346089][ T61] team0 (unregistering): Port device team_slave_0 removed [ 3065.410679][T29332] ieee802154 phy0 wpan0: encryption failed: -22 [ 3065.460989][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3065.525211][T29333] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 3065.550573][T29333] i2c i2c-0: new_device: Extra parameters [ 3065.564019][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3066.323342][ T61] bond0 (unregistering): Released all slaves [ 3066.571790][T29279] chnl_net:caif_netlink_parms(): no params data found [ 3066.715529][T29312] rxe_eth0 speed is unknown, defaulting to 1000 [ 3067.686810][T29314] Bluetooth: hci1: command tx timeout [ 3068.191096][T29279] bridge0: port 1(bridge_slave_0) entered blocking state [ 3068.314273][T29279] bridge0: port 1(bridge_slave_0) entered disabled state [ 3068.354405][T29279] bridge_slave_0: entered allmulticast mode [ 3068.370695][T29279] bridge_slave_0: entered promiscuous mode [ 3068.379638][T29279] bridge0: port 2(bridge_slave_1) entered blocking state [ 3068.417069][T29279] bridge0: port 2(bridge_slave_1) entered disabled state [ 3068.453905][T29279] bridge_slave_1: entered allmulticast mode [ 3068.473604][T29279] bridge_slave_1: entered promiscuous mode [ 3068.661550][T29279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3068.695524][T29279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3068.835339][T29279] team0: Port device team_slave_0 added [ 3068.866567][T29279] team0: Port device team_slave_1 added [ 3070.051780][T29314] Bluetooth: hci1: command tx timeout [ 3070.240206][T29279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3070.247237][T29279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3071.925185][T29279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3071.962919][T29279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3071.969933][T29279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3072.110111][T29279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3072.292044][ T50] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3072.497928][ T50] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3072.716388][T29279] hsr_slave_0: entered promiscuous mode [ 3072.740894][T29279] hsr_slave_1: entered promiscuous mode [ 3072.887612][ T50] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3073.119510][ T50] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3073.856522][T29312] chnl_net:caif_netlink_parms(): no params data found [ 3075.315380][T29413] ieee802154 phy0 wpan0: encryption failed: -22 [ 3075.430586][T29413] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 3075.450742][T29413] i2c i2c-0: new_device: Extra parameters [ 3076.977828][T29425] loop6: detected capacity change from 0 to 512 [ 3076.994817][T29425] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3077.062556][T29425] EXT4-fs error (device loop6): ext4_orphan_get:1408: inode #15: comm syz.6.4853: inode has both inline data and extents flags [ 3077.077049][T29425] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.4853: couldn't read orphan inode 15 (err -117) [ 3077.105888][T29425] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3077.433509][T29431] EXT4-fs error (device loop6): ext4_add_entry:2488: inode #2: comm syz.6.4853: Directory hole found for htree leaf block 0 [ 3078.057264][T17992] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3080.173979][T29312] bridge0: port 1(bridge_slave_0) entered blocking state [ 3080.190384][T29312] bridge0: port 1(bridge_slave_0) entered disabled state [ 3080.197721][T29312] bridge_slave_0: entered allmulticast mode [ 3080.221754][T29312] bridge_slave_0: entered promiscuous mode [ 3080.247665][T29312] bridge0: port 2(bridge_slave_1) entered blocking state [ 3080.270488][T29312] bridge0: port 2(bridge_slave_1) entered disabled state [ 3080.277867][T29312] bridge_slave_1: entered allmulticast mode [ 3080.290456][T29312] bridge_slave_1: entered promiscuous mode [ 3080.531568][T29312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3080.591821][T29312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3081.062988][T29312] team0: Port device team_slave_0 added [ 3081.345821][T29312] team0: Port device team_slave_1 added [ 3082.738108][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 3082.750588][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 3082.926998][T29312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3082.942922][T29312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3082.975117][T29312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3082.997451][T29312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3083.005210][T29312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3083.032260][T29312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3083.157036][T29279] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 3083.175233][T29279] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 3083.247063][T29279] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 3083.270013][T29312] hsr_slave_0: entered promiscuous mode [ 3083.281389][T29312] hsr_slave_1: entered promiscuous mode [ 3083.293789][T29312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3083.305178][T29312] Cannot create hsr debugfs directory [ 3083.316436][T29279] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 3083.777278][T29451] loop6: detected capacity change from 0 to 512 [ 3083.789460][T29451] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3083.833331][T29451] EXT4-fs error (device loop6): ext4_orphan_get:1408: inode #15: comm syz.6.4858: inode has both inline data and extents flags [ 3083.846992][T29451] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.4858: couldn't read orphan inode 15 (err -117) [ 3083.874950][T29451] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3084.180632][T29458] EXT4-fs error (device loop6): ext4_add_entry:2488: inode #2: comm syz.6.4858: Directory hole found for htree leaf block 0 [ 3085.211934][T17992] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3085.331609][T29462] loop3: detected capacity change from 0 to 512 [ 3085.340817][ T50] hsr_slave_0: left promiscuous mode [ 3085.350863][T29462] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3085.393866][T29462] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.4861: inode has both inline data and extents flags [ 3085.408241][T29462] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.4861: couldn't read orphan inode 15 (err -117) [ 3085.424996][ T50] hsr_slave_1: left promiscuous mode [ 3085.443280][T29462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3085.471377][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3085.493116][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3085.543388][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3085.643629][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3085.809733][ T50] bridge_slave_1: left allmulticast mode [ 3085.929119][ T50] bridge_slave_1: left promiscuous mode [ 3085.981536][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 3086.028560][ T50] bridge_slave_0: left allmulticast mode [ 3086.041451][ T50] bridge_slave_0: left promiscuous mode [ 3086.123107][T29468] EXT4-fs error (device loop3): ext4_add_entry:2488: inode #2: comm syz.3.4861: Directory hole found for htree leaf block 0 [ 3086.186975][T29468] hub 5-0:1.0: USB hub found [ 3086.199334][T29468] hub 5-0:1.0: 1 port detected [ 3086.467650][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 3087.841704][T15862] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3087.867432][ T50] veth1_macvtap: left promiscuous mode [ 3087.930302][ T50] veth0_macvtap: left promiscuous mode [ 3087.936084][ T50] veth1_vlan: left promiscuous mode [ 3087.961378][ T50] veth0_vlan: left promiscuous mode [ 3088.037589][T29474] loop3: detected capacity change from 0 to 512 [ 3088.047496][T29474] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3088.088589][T29474] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.4863: inode has both inline data and extents flags [ 3088.102732][T29474] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.4863: couldn't read orphan inode 15 (err -117) [ 3088.116578][T29474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3088.470296][T29477] EXT4-fs error (device loop3): ext4_add_entry:2488: inode #2: comm syz.3.4863: Directory hole found for htree leaf block 0 [ 3089.231390][T15862] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3094.205997][ T50] team0 (unregistering): Port device team_slave_1 removed [ 3094.689142][ T50] team0 (unregistering): Port device team_slave_0 removed [ 3094.712555][T29505] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4869'. [ 3094.829125][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3094.958073][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3095.852993][ T50] bond0 (unregistering): Released all slaves [ 3096.304719][T29279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3096.578345][T29279] 8021q: adding VLAN 0 to HW filter on device team0 [ 3096.732055][ T750] bridge0: port 1(bridge_slave_0) entered blocking state [ 3096.739299][ T750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3096.793970][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 3096.801214][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3098.647388][T29528] loop6: detected capacity change from 0 to 512 [ 3098.685711][T29528] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3098.698417][T29312] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 3098.727570][T29528] EXT4-fs error (device loop6): ext4_orphan_get:1408: inode #15: comm syz.6.4871: inode has both inline data and extents flags [ 3098.750138][T29528] EXT4-fs error (device loop6): ext4_orphan_get:1413: comm syz.6.4871: couldn't read orphan inode 15 (err -117) [ 3098.764273][T29528] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3098.772187][T29312] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 3098.888350][T29312] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 3098.986357][T29312] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 3099.153894][T29536] hub 5-0:1.0: USB hub found [ 3099.158916][T29536] hub 5-0:1.0: 1 port detected [ 3099.685106][T29279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3099.832639][T17992] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3099.925527][T29312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3100.029168][T29312] 8021q: adding VLAN 0 to HW filter on device team0 [ 3100.103022][T22138] bridge0: port 1(bridge_slave_0) entered blocking state [ 3100.110316][T22138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3100.144524][T22138] bridge0: port 2(bridge_slave_1) entered blocking state [ 3100.151806][T22138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3101.908211][T29279] veth0_vlan: entered promiscuous mode [ 3103.203004][T29279] veth1_vlan: entered promiscuous mode [ 3103.443347][T29279] veth0_macvtap: entered promiscuous mode [ 3103.476440][T29279] veth1_macvtap: entered promiscuous mode [ 3103.501737][T29312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3103.570593][T29279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3103.606926][T29279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3103.640112][T29279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3103.660226][T29279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3103.698346][T29279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3103.743765][T29279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3103.800145][T29279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3103.830344][T29279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3103.870220][T29279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3103.911947][T29279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3103.934825][T29279] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3103.959680][T29279] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3103.986610][T29279] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3104.020116][T29279] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3106.123339][T22138] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3106.144788][T29600] loop3: detected capacity change from 0 to 512 [ 3106.172929][T29600] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 3106.218542][T29600] EXT4-fs error (device loop3): ext4_orphan_get:1408: inode #15: comm syz.3.4876: inode has both inline data and extents flags [ 3106.236730][T29600] EXT4-fs error (device loop3): ext4_orphan_get:1413: comm syz.3.4876: couldn't read orphan inode 15 (err -117) [ 3106.254244][T29600] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 3106.509391][T29312] veth0_vlan: entered promiscuous mode [ 3106.664536][T29605] EXT4-fs error (device loop3): ext4_add_entry:2488: inode #2: comm syz.3.4876: Directory hole found for htree leaf block 0 [ 3106.710686][T29605] hub 5-0:1.0: USB hub found [ 3106.716596][T29605] hub 5-0:1.0: 1 port detected [ 3107.133642][T22138] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3107.183174][T29312] veth1_vlan: entered promiscuous mode [ 3107.286101][T15862] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 3107.307533][T29312] veth0_macvtap: entered promiscuous mode [ 3107.320186][T29312] veth1_macvtap: entered promiscuous mode [ 3107.416798][T22138] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3107.466552][T29312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3107.479180][T29312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3107.489583][T29312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3107.504538][T29312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3107.514580][T29312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3107.529840][T29312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3107.558070][T29312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3107.594644][T22138] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3107.624531][T29312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3107.636816][T29312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3107.647048][T29312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3107.657655][T29312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3107.667801][T29312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3107.685394][T29312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3107.699419][T29312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3107.715457][T29312] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3107.728826][T29312] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3107.739548][T29312] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3107.752632][T29312] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: initialize_wifi_devices: failed set up IBSS network device=0 (errno 22: Invalid argument) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=8 req=3776 state=3 status=67 (errno 32: Broken pipe) [ 3109.483749][T29636] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 3109.568714][T29636] CPU: 0 PID: 29636 Comm: syz-executor Not tainted syzkaller #0 [ 3109.576455][T29636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 3109.586580][T29636] Call Trace: [ 3109.589907][T29636] [ 3109.592880][T29636] dump_stack_lvl+0x18c/0x250 [ 3109.597622][T29636] ? show_regs_print_info+0x20/0x20 [ 3109.602887][T29636] ? load_image+0x420/0x420 [ 3109.607482][T29636] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 3109.613955][T29636] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 3109.620516][T29636] warn_alloc+0x246/0x340 [ 3109.624904][T29636] ? zone_watermark_ok_safe+0x230/0x230 [ 3109.630535][T29636] ? _raw_spin_unlock+0x28/0x40 [ 3109.635453][T29636] __vmalloc_node_range+0x661/0x1320 [ 3109.640831][T29636] ? free_vm_area+0x50/0x50 [ 3109.645394][T29636] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 3109.651099][T29636] ? kcov_remote_reset+0xc0/0xc0 [ 3109.656087][T29636] vmalloc_user+0x74/0x80 [ 3109.660469][T29636] ? kcov_ioctl+0x58/0x610 [ 3109.664937][T29636] kcov_ioctl+0x58/0x610 [ 3109.669408][T29636] ? bpf_lsm_file_ioctl+0x9/0x10 [ 3109.674434][T29636] ? security_file_ioctl+0x80/0xa0 [ 3109.679599][T29636] ? kcov_remote_reset+0xc0/0xc0 [ 3109.684588][T29636] __se_sys_ioctl+0xfd/0x170 [ 3109.689239][T29636] do_syscall_64+0x55/0xb0 [ 3109.693710][T29636] ? clear_bhb_loop+0x40/0x90 [ 3109.698451][T29636] ? clear_bhb_loop+0x40/0x90 [ 3109.703205][T29636] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3109.709181][T29636] RIP: 0033:0x7fda29da8bab [ 3109.713657][T29636] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 3109.733417][T29636] RSP: 002b:00007ffca1bba930 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3109.741920][T29636] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007fda29da8bab [ 3109.749949][T29636] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000dd [ 3109.758069][T29636] RBP: 00007fda2a0264e8 R08: 0000000000000000 R09: 0000000000000000 [ 3109.766192][T29636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3109.774309][T29636] R13: 0000000000000003 R14: 00007ffca1bbabe8 R15: 0000000000000000 [ 3109.782371][T29636] [ 3109.816796][T29636] Mem-Info: [ 3109.821143][T29636] active_anon:6973 inactive_anon:6 isolated_anon:0 [ 3109.821143][T29636] active_file:17833 inactive_file:41406 isolated_file:0 [ 3109.821143][T29636] unevictable:768 dirty:135 writeback:0 [ 3109.821143][T29636] slab_reclaimable:11149 slab_unreclaimable:101009 [ 3109.821143][T29636] mapped:10950 shmem:1449 pagetables:751 [ 3109.821143][T29636] sec_pagetables:0 bounce:0 [ 3109.821143][T29636] kernel_misc_reclaimable:0 [ 3109.821143][T29636] free:1341103 free_pcp:9422 free_cma:0 [ 3109.928906][T29636] Node 0 active_anon:27792kB inactive_anon:24kB active_file:71332kB inactive_file:165420kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:43800kB dirty:540kB writeback:0kB shmem:4260kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13200kB pagetables:3004kB sec_pagetables:0kB all_unreclaimable? no [ 3109.963906][T29636] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 3110.008291][T29636] Node 0 DMA free:15328kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 3110.038888][T29636] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 3110.045738][T29636] Node 0 DMA32 free:1437876kB boost:0kB min:34492kB low:43112kB high:51732kB reserved_highatomic:0KB active_anon:27756kB inactive_anon:24kB active_file:71332kB inactive_file:164592kB unevictable:1536kB writepending:540kB present:3129332kB managed:2567744kB mlocked:0kB bounce:0kB free_pcp:34792kB local_pcp:13792kB free_cma:0kB [ 3110.137795][T29636] lowmem_reserve[]: 0 0 0 0 0 [ 3110.186091][T29636] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 3110.256491][T29636] lowmem_reserve[]: 0 0 0 0 0 [ 3110.287197][T29636] Node 1 Normal free:3918148kB boost:0kB min:55396kB low:69244kB high:83092kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:9440kB local_pcp:0kB free_cma:0kB [ 3110.355621][T22138] hsr_slave_0: left promiscuous mode [ 3110.367323][T29636] lowmem_reserve[]: 0 0 0 0 0 [ 3110.389004][T29636] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 3110.407023][T29636] Node 0 DMA32: 4273*4kB (UME) 5511*8kB (UME) 3670*16kB (UME) 2064*32kB (UME) 809*64kB (UME) 337*128kB (UME) 142*256kB (UME) 92*512kB (UME) 45*1024kB (M) 35*2048kB (UM) 241*4096kB (UM) = 1469212kB [ 3110.429047][T29636] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3110.443980][T22138] hsr_slave_1: left promiscuous mode [ 3110.450909][T22138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3110.459166][T22138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3110.474620][T22138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3110.482316][T29636] Node 1 Normal: 213*4kB (UME) 64*8kB (UME) 49*16kB (UME) 267*32kB (UME) 110*64kB (UE) 38*128kB (UME) 3*256kB (U) 3*512kB (UME) 2*1024kB (UE) 2*2048kB (UE) 949*4096kB (M) = 3918148kB [ 3110.503685][T22138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3110.522199][T22138] bridge_slave_1: left allmulticast mode [ 3110.527986][T22138] bridge_slave_1: left promiscuous mode [ 3110.535435][T22138] bridge0: port 2(bridge_slave_1) entered disabled state [ 3110.552935][T22138] bridge_slave_0: left allmulticast mode [ 3110.558663][T22138] bridge_slave_0: left promiscuous mode [ 3110.564658][T29636] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3110.566398][T22138] bridge0: port 1(bridge_slave_0) entered disabled state [ 3110.636126][T29636] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 3110.674630][T29636] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3110.706865][T22138] veth1_macvtap: left promiscuous mode [ 3110.710217][T29636] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3110.738584][T29636] 60543 total pagecache pages [ 3110.738781][T22138] veth0_macvtap: left promiscuous mode [ 3110.766452][T29636] 6 pages in swap cache [ 3110.775685][T29636] Free swap = 124436kB [ 3110.776948][T22138] veth1_vlan: left promiscuous mode [ 3110.781533][T29636] Total swap = 124996kB [ 3110.812660][T29636] 2097051 pages RAM [ 3110.816563][T29636] 0 pages HighMem/MovableOnly [ 3110.821903][T29636] 421729 pages reserved [ 3110.826116][T29636] 0 pages cma reserved [ 3110.851899][T22138] veth0_vlan: left promiscuous mode [ 3112.609276][T22138] team0 (unregistering): Port device team_slave_1 removed [ 3112.715858][T22138] team0 (unregistering): Port device team_slave_0 removed [ 3112.813123][T22138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3112.972338][T22138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3113.907065][T22138] bond0 (unregistering): Released all slaves [ 3114.006143][T15862] tipc: Resetting bearer [ 3114.042019][T15862] tipc: Disabling bearer [ 3114.813571][T22138] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3114.825015][T22138] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 3114.929503][T22138] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3114.945856][T22138] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 3115.047969][T22138] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3115.065922][T22138] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 3115.457658][T22138] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3115.558314][T22138] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3115.654698][T22138] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3115.999175][T22138] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3116.107132][T22138] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3116.216196][T22138] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3116.287896][T22138] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3116.527776][T22138] tipc: Left network mode